CVE-2026-101354
Received Received - Intake

Stack-Based Buffer Overflow in FAST FAC1203R

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: VulDB

Description
A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-29
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
CVE-2026-101354
EUVD
EUVD-2026-88600

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
fast fac1203r 20200116_2.0.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-101354 is a stack-based buffer overflow in the FAST FAC1203R router firmware version 20200116_2.0.4. The flaw exists in the MmtAtePrase parsing function, which is accessible via the _tWlanTask UDP handler on port 1060. An attacker can send a specially crafted UDP packet starting with 'wioctl' followed by an oversized argument of 3072 bytes, causing a stack overflow. This can lead to task crashes or denial of service without requiring authentication.

Detection Guidance

To detect this vulnerability, monitor network traffic for UDP packets on port 1060. Look for packets starting with the 'wioctl' command prefix followed by an oversized argument (3072 bytes). Use packet capture tools like tcpdump or Wireshark to inspect traffic on port 1060. Check router logs for crashes or unusual activity in the _tWlanTask function.

Impact Analysis

This vulnerability allows an attacker on the local network to crash the router or cause a denial of service by sending malicious UDP packets. Since no authentication is required, the attack can be executed remotely if the router's UDP port 1060 is exposed. This may disrupt network services, internet access, or connected devices relying on the router.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA due to its ability to cause denial of service or unauthorized access via stack-based buffer overflow. GDPR requires protecting personal data integrity and availability, while HIPAA mandates safeguarding protected health information. A successful exploit could lead to data breaches or service disruptions, violating these standards.

Mitigation Strategies
  • Restrict access to UDP port 1060 by blocking it at the firewall level.
  • Disable remote management services if not required.
  • Implement packet filtering to block malformed UDP packets starting with 'wioctl' and oversized arguments.
  • Monitor router logs for signs of exploitation attempts or crashes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101354. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart