This vulnerability involves a stack-based buffer overflow in the copy_msg_element function of the Device Discovery Service in Fast FAC1203R Gigabit Edition 2.0.4. An attacker can remotely manipulate inputs to trigger the overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 10.0, indicating critical severity. The vendor was contacted but did not respond, and no patch or mitigation guidance has been provided. Exploit code is publicly available.

Successful exploitation can lead to remote code execution or denial of service due to the stack-based buffer overflow. The vulnerability requires no privileges or user interaction and can be triggered remotely, making it highly exploitable. The published exploit increases the risk of active attacks.

No official patch or mitigation is currently available from the vendor. Users should monitor for vendor advisories and apply updates once released. Until then, consider limiting network exposure of the affected service and applying network-level protections to restrict access to the Device Discovery Service.