Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-40556

A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versions

Description

A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versions). Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service condition of the targeted device. A power cycle is required to restore the device's normal operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens BACnet ATEC 550-440

Default version status: unknown

  • 0 to < *affected

Siemens BACnet ATEC 550-441

Default version status: unknown

  • 0 to < *affected

Siemens BACnet ATEC 550-445

Default version status: unknown

  • 0 to < *affected

Siemens BACnet ATEC 550-446

Default version status: unknown

  • 0 to < *affected

References