CVE-2026-96257
Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow
- State
- Published
- Severity
- 10.0 Critical
- Published
- Sep 23, 2026
- Updated
- Sep 23, 2026
- Reserved
- Sep 22, 2026
Description
A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 10.0 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P | VulDB |
| 3.1 | 10.0 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 3.0 | 10.0 Critical | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 2.0 | 10.0 High | AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
FAC1203R Gigabit EditionFast |
|
References
- VDB-408707 | Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflowvdb-entrytechnical-description
- VDB-408707 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-96257 | CVE Analysis and Reportthird-party-advisory
- Submit #901889 | Fast FAC1203R Gigabit Edition 20200116_2.0.4 Stack-based Buffer Overflowthird-party-advisory
- https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/vul-find-FAST_FAC1203R-copy_msg_elementexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.