Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-0657

ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Carrier

Description

A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network visibility.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Automated Logic WebCtrl

Default version status: unaffected

  • 0 to ≤ 8.5affected

Automated Logic Gen5 Controllers

Default version status: unaffected

  • 0 to ≤ drv_gen5_108-04-20120affected

Carrier i-Vu

Default version status: unaffected

  • 0 to ≤ 8.5affected

References