A stack-based buffer overflow occurs in the get_alias_name function of the uhttpd component on Fast FAC1900R firmware 20190827_2.0.2. The flaw falls under CWE‑119 and CWE‑121, and it can be triggered remotely. Once exploited, it may allow an adversary to overflow the stack and potentially execute arbitrary code with the privileges of the uhttpd process, leading to a compromise of the device. The description states that the exploit is publicly available and could be used by attackers, highlighting the seriousness of the vulnerability.

The affected system is the Fast FAC1900R device, specifically firmware version 20190827_2.0.2. No additional vendor or product versions are listed in the provided data, so any device running this firmware build is potentially vulnerable.

The vulnerability receives a CVSS score of 5.3, indicating a moderate risk level. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. However, the public availability of an exploit and the remote nature of the attack vector suggest that the vulnerability is exploitable in real-world scenarios and should be addressed promptly.