CVE-2026-101038
Received Received - Intake

Stack-Based Buffer Overflow in FAST FAC1200R Firmware

Publication date: 2026-09-28

Last updated on: 2026-09-28

Assigner: VulDB

Description
A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulation causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-28
Last Modified
2026-09-28
Generated
2026-09-28
AI Q&A
2026-09-28
EPSS Evaluated
N/A
NVD
CVE-2026-101038
EUVD
EUVD-2026-88207

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
fast fac1200r 5.0_20201119_1.0.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow vulnerability in the FAST FAC1200R router firmware version V5.0_20201119_1.0.2. It exists in the MmtAtePrase parsing path of the UDP 1060 twlantask service. An attacker can exploit this by sending a crafted UDP packet with a specific command prefix followed by a large payload of 3072 bytes, causing a stack overflow that may lead to service crashes or denial of service.

Detection Guidance

To detect this vulnerability, check if UDP port 1060 is open on the FAST FAC1200R device. Use network scanning tools like nmap to identify open ports. If port 1060 is accessible, attempt to send a crafted UDP packet with a payload of 3065 spaces followed by a newline to trigger the overflow. Monitor system logs for crashes or unusual activity on the device.

Impact Analysis

This vulnerability allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending a malformed UDP packet to port 1060. If exploited, it could disrupt router services, leading to network outages or unauthorized access to the device.

Compliance Impact

This vulnerability, a stack-based buffer overflow in FAST FAC1200R firmware, could lead to denial of service or remote code execution. For GDPR, it may impact data integrity and availability if exploited, potentially violating Article 32 security requirements. For HIPAA, it could compromise protected health information confidentiality and availability if the device processes such data, violating Security Rule safeguards.

Mitigation Strategies

Immediately restrict access to UDP port 1060 on the FAST FAC1200R device by blocking it at the firewall or gateway. Disable any unnecessary remote management services that expose this port. If remote management is required, restrict access to trusted IP addresses only. Monitor network traffic for suspicious UDP packets targeting port 1060.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101038. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart