CVE-2025-0657 — ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range

CVE-2025-0657

ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range PUBLISHED

Description (CNA)

A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network visibility.

Affected (CNA)

Vendor / product	Versions
Automated Logic / WebCtrl	affected 0 through 8.5
Automated Logic / Gen5 Controllers	affected 0 through drv_gen5_108-04-20120
Carrier / i-Vu	affected 0 through 8.5

CWE

CWE-129, CWE-248

References

https://www.corporate.carrier.com/product-security/advisories-resources/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.