VULNERABILITY INTELLIGENCE
CVE-2025-0657
CVSS score8.8 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2025-11-27
Last modified2026-10-18
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
Description
A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network visibility.
Weakness classification
- CWE-129: Improper Validation of Array Index
- CWE-248: Uncaught Exception