CVE-2025-50402

FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter string fac_password

Critical · published November 26, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

🚨 A buffer overflow in the FAST FAC1200R could let attackers run wild, thanks to a sneaky flaw in the `fac_password` parameter! 🔥 Think of it like a waiter at a restaurant who keeps pouring wine into an already full glass — eventually, it overflows and spills everywhere. In this case, the overflow could give an attacker access to all sorts of sensitive data and operations within the system! An attacker could exploit this vulnerability to gain unauthorized access, potentially leading to complete system control. Imagine a malicious intruder being able to change configurations, access private data, or even shut down critical services — absolutely devastating!

Put simply

Think of it like a waiter at a restaurant who keeps pouring wine into an already full glass — eventually, it overflows and spills everywhere. In this case, the overflow could give an attacker access to all sorts of sensitive data and operations within the system! This buffer overflow vulnerability occurs when the `sub_80435780` function fails to properly validate the length of the `fac_password` string, allowing an attacker to overwrite adjacent memory. This could lead to arbitrary code execution or a system crash.

What to do

An attacker could exploit this vulnerability to gain unauthorized access, potentially leading to complete system control. Imagine a malicious intruder being able to change configurations, access private data, or even shut down critical services — absolutely devastating! Immediate action is critical: patch your FAST FAC1200R to the latest version provided by the vendor to fix this buffer overflow. Additionally, review and harden input validation on your parameters to prevent similar vulnerabilities in the future. You've got this! Implement the patch and secure your system like the hero you are! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.5th percentile
Published
2025-11-26T00:00Z
EPSS history
Timeline
  • 26 NOV 00:00Z
    FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter string fac_password
    cvelistv5