This vulnerability affects the FAST FAC1200R device running version 5.0_20201119_1.0.2. The issue lies in the parse_advertisement_frame function of the devdiscover Service, where improper handling of input leads to a stack-based buffer overflow. The vulnerability can be triggered remotely, allowing an attacker to potentially execute arbitrary code or cause a denial of service. The CVSS v4.0 score is 9.4 (critical), reflecting high impact and ease of exploitation. The vendor was notified but has not responded or provided a fix. Public exploit code exists.

Successful exploitation could allow a remote attacker with low privileges to execute arbitrary code or crash the device, leading to denial of service. The vulnerability affects confidentiality, integrity, availability, and system control, all rated high impact in the CVSS vector. Given the public availability of exploit code and lack of vendor mitigation, affected systems are at significant risk.

No official patch or fix is currently available from the vendor. Since the vendor has not responded and no remediation guidance is provided, users should consider isolating affected devices from untrusted networks and monitor for suspicious activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.