Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-0658

Automated Logic and Carrier Zone Controllers malformed packets denial of service

Description

A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault state; after a reset, a second packet can leave it permanently unresponsive until a manual power cycle is performed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Automated Logic Zone Controllers

Default version status: unaffected

  • 0 to < 6.06-101affected

Carrier Zone Controllers

Default version status: unaffected

  • 0 to < 6.06-101affected

References