{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/fast/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:fast:fac1203r_gigabit_edition_firmware:2.0.4:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-96257"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FAC1203R Gigabit Edition (2.0.4)"],"_cs_severities":["critical"],"_cs_tags":["cve","remote-code-execution","buffer-overflow"],"_cs_type":"threat","_cs_vendors":["Fast"],"content_html":"\u003cp\u003eA critical security vulnerability (CVE-2026-96257) has been identified in the Fast FAC1203R Gigabit Edition firmware version 2.0.4. The vulnerability originates in the copy_msg_element function within the Device Discovery Service. Due to improper input validation, an attacker can trigger a stack-based buffer overflow by sending a specially crafted packet to the device. Because the service is exposed and reachable remotely, this flaw allows for unauthenticated remote code execution with the privileges of the service. Publicly available exploit code exists, increasing the risk of active exploitation. The vendor has not responded to disclosure attempts, and no security patches are currently available.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in full system compromise, allowing an attacker to execute arbitrary code with elevated privileges on the network device. This facilitates deeper lateral movement into the local network, traffic interception, and potential persistence within the infrastructure. This vulnerability is rated with a CVSS v3.1 base score of 10.0, indicating the highest level of severity.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eRestrict network access to the Device Discovery Service on all Fast FAC1203R units to trusted management segments only.\u003c/li\u003e\n\u003cli\u003eImplement network-level egress and ingress filtering to identify anomalous packet structures targeting common device discovery ports.\u003c/li\u003e\n\u003cli\u003eMonitor device logs for signs of service crashes or unauthorized configuration changes, which may indicate attempted exploitation of CVE-2026-96257.\u003c/li\u003e\n\u003cli\u003eIsolate vulnerable hardware from the public internet until a firmware update is provided by the vendor.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-09-23T04:41:17Z","date_published":"2026-09-23T04:41:17Z","id":"https://feed.craftedsignal.io/briefs/2026-09-cve-2026-96257/","summary":"A critical stack-based buffer overflow vulnerability in the Device Discovery Service of Fast FAC1203R firmware 2.0.4 allows for unauthenticated remote code execution.","title":"Stack-Based Buffer Overflow in Fast FAC1203R Gigabit Edition","url":"https://feed.craftedsignal.io/briefs/2026-09-cve-2026-96257/"}],"language":"en","title":"CraftedSignal Threat Feed - Fast","version":"https://jsonfeed.org/version/1.1"}