A critical stack-based buffer overflow vulnerability in the Fast FAC1203R Gigabit Edition allows remote, unauthenticated attackers to execute arbitrary code on affected devices.

This is a stack-based buffer overflow (CWE-121) occurring in the copy_msg_element function of the Device Discovery Service. An unauthenticated attacker can send a specially crafted UDP packet to port 5001, triggering a memory copy operation that lacks bounds checking, which results in the overwriting of the stack return address.

Successful exploitation of this vulnerability allows an attacker to gain full control over the affected router, potentially leading to complete system compromise, unauthorized network access, and persistent monitoring of traffic. Given the CVSS score of 10.0, this flaw represents the highest level of risk, as it allows remote code execution without any user interaction or authentication.

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to UDP port 5001 at the network perimeter to prevent reachability from untrusted sources.

Proactive Monitoring: Monitor network traffic for anomalous UDP packets directed at port 5001 and review system logs for signs of service crashes or unexpected reboots of the device discovery service.

Compensating Controls: Implement strict firewall rules to ensure that the device discovery service is only accessible from trusted management segments, effectively isolating the vulnerable interface from the public internet.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the research write-up by the vulnerability discoverer (xiaobor123).

The severity of this vulnerability is extreme, and it presents a significant risk to any organization utilizing the affected Fast FAC1203R hardware. Because the vendor has not yet released a patch, organizations must prioritize the implementation of network-level access controls to block traffic to the vulnerable service. Please monitor the vendor website for firmware updates and apply them immediately once they become available.