Fac1203R
Monthly
A stack-based buffer overflow in the FAST FAC1203R router firmware (version 20200116_2.0.4) is reachable through the MmtAtePrase parser inside the _tWlanTask function, letting an attacker on the same LAN or WiFi segment send crafted input that corrupts the stack and can lead to full compromise of the device (assessed CVSS:3.1 base 8.8, AV:A/AC:L/PR:N/UI:N/C:H/I:H/A:H). No authentication or user interaction is required once the attacker has local network adjacency, so the realistic exposure is confined to attackers who can join or reach the local network rather than the general internet. Publicly available exploit code exists and a proof-of-concept repository has been published, but there is no indication of confirmed active exploitation (CISA KEV) at time of analysis, and the vendor did not respond to disclosure, so no vendor patch is currently identified.
A stack-based buffer overflow in the FAST FAC1203R router firmware (version 20200116_2.0.4) is reachable through the MmtAtePrase parser inside the _tWlanTask function, letting an attacker on the same LAN or WiFi segment send crafted input that corrupts the stack and can lead to full compromise of the device (assessed CVSS:3.1 base 8.8, AV:A/AC:L/PR:N/UI:N/C:H/I:H/A:H). No authentication or user interaction is required once the attacker has local network adjacency, so the realistic exposure is confined to attackers who can join or reach the local network rather than the general internet. Publicly available exploit code exists and a proof-of-concept repository has been published, but there is no indication of confirmed active exploitation (CISA KEV) at time of analysis, and the vendor did not respond to disclosure, so no vendor patch is currently identified.