{"id":"CVE-2026-96257","published":"2026-09-23T03:17:06.077","lastModified":"2026-09-23T15:17:31.920","description":"A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-119","CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/vul-find-FAST_FAC1203R-copy_msg_element","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-96257","tags":[]},{"url":"https://vuldb.com/submit/901889","tags":[]},{"url":"https://vuldb.com/vuln/408707","tags":[]},{"url":"https://vuldb.com/vuln/408707/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/vul-find-FAST_FAC1203R-copy_msg_element","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is a stack-based buffer overflow in the copy_msg_element function of the Device Discovery Service in Fast FAC1203R Gigabit Edition 2.0.4, which can lead to remote code execution. This issue is critical as it allows attackers to exploit the vulnerability to gain control over the affected system.","exploitability":"Exploitation is relatively easy given the remote execution capability. An attacker needs to manipulate the input to the copy_msg_element function to trigger the buffer overflow.","blast_radius":"If exploited, the impact could be severe, potentially leading to complete control of the affected system, data loss, or denial of service.","remediation":"Upgrade to the fixed version 2.0.5 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","buffer-overflow","remote-exploit","gigabit-edition"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-27T08:45:41.082Z"}}