VULNERABILITY INTELLIGENCE
CVE-2025-0658
EPSS probability0.36%
CISA KEVNot currently listed
Published2025-11-27
Last modified2026-10-18
Description
A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault state; after a reset, a second packet can leave it permanently unresponsive until a manual power cycle is performed.
Weakness classification
- productsecurity@carrier.com: CWE-20