CVE-2026-101037: FAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow
A vulnerability was found in FAST FAC1200R 5.0202011191.0.2. Affected is the function parseadvertisementframe of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The issue can be launched remotely and requires low privileges. No user interaction is required.
Is public exploit material available?
Yes. The exploit has been made public and could be used by attackers.
Which product version is identified as affected?
The affected product identified in the available information is FAST FAC1200R version 5.0_20201119_1.0.2.
Is a vendor fix available?
The available information does not identify a fix. It states that the vendor was contacted before disclosure but did not respond.