CVE-2026-96257

Summary

The flaw is a stack-based buffer overflow in the copy_msg_element function of the Device Discovery Service in Fast FAC1203R Gigabit Edition 2.0.4, which can lead to remote code execution. This issue is critical as it allows attackers to exploit the vulnerability to gain control over the affected system.

Exploitability

Exploitation is relatively easy given the remote execution capability. An attacker needs to manipulate the input to the copy_msg_element function to trigger the buffer overflow.

Blast radius

If exploited, the impact could be severe, potentially leading to complete control of the affected system, data loss, or denial of service.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 2.0.5 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.