FAC1203R (20200116_2.0.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/fac1203r-20200116_2.0.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 29 Sep 2026 02:23:43 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgStack-Based Buffer Overflow in FAST FAC1203R MmtAtePrase Parserhttps://feed.craftedsignal.io/briefs/2026-09-cve-2026-101354/Tue, 29 Sep 2026 02:23:43 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-cve-2026-101354/A stack-based buffer overflow vulnerability in the _tWlanTask function of the FAST FAC1203R router allows remote code execution via network-based manipulation.A critical stack-based buffer overflow vulnerability, identified as CVE-2026-101354, exists in the MmtAtePrase parser component of the FAST FAC1203R network device, specifically within the _tWlanTask function. The vulnerability is triggered by sending specially crafted network traffic to the device. An attacker must have access to the local network to reach the vulnerable function. Public exploit code is available for this vulnerability, and the vendor has not provided a patch or acknowledged the disclosure. This defect poses a significant risk to the integrity and availability of impacted devices, as successful exploitation may result in unauthorized code execution.

Impact

Successful exploitation of this vulnerability allows an unauthenticated attacker on the local network to trigger a stack-based buffer overflow in the device firmware. This can lead to device crashes or the execution of arbitrary code with the privileges of the _tWlanTask, effectively granting the attacker full control over the affected FAC1203R unit. Given the public availability of exploit code, the risk of exploitation is high.

Recommendation

  • Since no vendor patch is available, prioritize isolating the FAST FAC1203R devices from the local network to restrict unauthorized access to the vulnerable _tWlanTask function.
  • Implement strict access control lists (ACLs) on network segments where these devices are deployed to prevent unauthorized traffic from reaching the device management or wireless interfaces.
  • Monitor network traffic for unusual patterns directed at the FAC1203R device, particularly traffic that could target the parser component, until the vendor addresses the vulnerability.
]]>criticaladvisoryvulnerabilityremote-code-executionnetworking