Description
A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulation causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-09-28
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Potential Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A stack‑based buffer overflow exists in the MmtAtePrase parser of FAST FAC1200R firmware 5.0_20201119_1.0.2. The flaw is triggered remotely and may allow execution of arbitrary code, which could compromise confidentiality, integrity, or availability. This assertion is inferred from the nature of the buffer overflow and the description of remote exploitation, but the CVE description does not explicitly confirm arbitrary code execution.

Affected Systems

FAST FAC1200R routers that are running firmware version 5.0_20201119_1.0.2 are affected. No other firmware versions are mentioned as vulnerable.

Risk and Exploitability

The CVSS score of 9.4 indicates a critical severity, and the vulnerability is publicly disclosed. The EPSS score is not available and the issue is not listed in the CISA KEV catalog, yet the combination of a high CVSS score, a remote exploit vector, and public disclosure suggests a significant risk of exploitation.

Generated by OpenCVE AI on September 28, 2026 at 12:31 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the router to a firmware version that contains the MmtAtePrase stack‑overflow patch.
  • If a patched firmware is unavailable, block or restrict external access to the interfaces that invoke MmtAtePrase, and limit management traffic to trusted IP addresses.
  • Enable logging and monitor for anomalous activity or error messages that could indicate exploitation attempts, and conduct routine vulnerability scans against the device.

Generated by OpenCVE AI on September 28, 2026 at 12:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 28 Sep 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 28 Sep 2026 10:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulation causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Title FAST FAC1200R MmtAtePrase stack-based overflow
First Time appeared Fast
Fast fac1200r
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:fast:fac1200r:*:*:*:*:*:*:*:*
Vendors & Products Fast
Fast fac1200r
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Fast Fac1200r
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-28T10:53:39.470Z

Reserved: 2026-09-27T14:30:34.416Z

Link: CVE-2026-101038

cve-icon Vulnrichment

Updated: 2026-09-28T10:53:35.254Z

cve-icon NVD

Status : Deferred

Published: 2026-09-28T11:16:43.423

Modified: 2026-09-28T15:16:04.793

Link: CVE-2026-101038

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-28T16:22:53Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow