Fac1900R
Monthly
A stack-based buffer overflow in the devdiscover service of FAST FAC1900R firmware 20190827_2.0.2 lets unauthenticated remote attackers corrupt stack memory by sending a crafted message to the copy_msg_element function, with high impact on confidentiality, integrity, and availability. The flaw is remotely reachable with no privileges or user interaction required (CVSS:4.0 base 9.3; independent assessment of 3.1/AV:N/AC:L/PR:N/UI:N with C:H/I:H/A:H), and publicly available exploit code exists, so any deployment where the service is reachable - typically LAN-adjacent, or WAN-exposed if the device forwards the service externally - is at risk. Exploitation is not confirmed as active (no CISA KEV entry), and the vendor was contacted early but never responded, so no official patch has been identified.
Stack-based buffer overflow in the get_alias_name function of the uhttpd web management service on the Fast FAC1900R SOHO router allows a low-privilege authenticated remote attacker to overwrite stack memory with a crafted request, resulting in limited loss of confidentiality, integrity, and availability (CVSS 4.0 base 5.3; vendor vector PR:L). Publicly available exploit code exists and is referenced from a GitHub proof-of-concept repository targeting the device's devDiscoverNotify handling, so the flaw is straightforward to reproduce for anyone who can reach the management interface. The vendor was contacted but did not respond and no vendor-released patch has been identified, leaving exposure reduction as the practical mitigation.
A stack-based buffer overflow in the devdiscover service of FAST FAC1900R firmware 20190827_2.0.2 lets unauthenticated remote attackers corrupt stack memory by sending a crafted message to the copy_msg_element function, with high impact on confidentiality, integrity, and availability. The flaw is remotely reachable with no privileges or user interaction required (CVSS:4.0 base 9.3; independent assessment of 3.1/AV:N/AC:L/PR:N/UI:N with C:H/I:H/A:H), and publicly available exploit code exists, so any deployment where the service is reachable - typically LAN-adjacent, or WAN-exposed if the device forwards the service externally - is at risk. Exploitation is not confirmed as active (no CISA KEV entry), and the vendor was contacted early but never responded, so no official patch has been identified.
Stack-based buffer overflow in the get_alias_name function of the uhttpd web management service on the Fast FAC1900R SOHO router allows a low-privilege authenticated remote attacker to overwrite stack memory with a crafted request, resulting in limited loss of confidentiality, integrity, and availability (CVSS 4.0 base 5.3; vendor vector PR:L). Publicly available exploit code exists and is referenced from a GitHub proof-of-concept repository targeting the device's devDiscoverNotify handling, so the flaw is straightforward to reproduce for anyone who can reach the management interface. The vendor was contacted but did not respond and no vendor-released patch has been identified, leaving exposure reduction as the practical mitigation.