CVE-2025-0658 — Automated Logic and Carrier Zone Controllers malformed packets denial of service

CVE-2025-0658

Automated Logic and Carrier Zone Controllers malformed packets denial of service PUBLISHED

Description (CNA)

A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault state; after a reset, a second packet can leave it permanently unresponsive until a manual power cycle is performed.

Affected (CNA)

Vendor / product	Versions
Automated Logic / Zone Controllers	affected 0 before 6.06-101
Carrier / Zone Controllers	affected 0 before 6.06-101

CWE

CWE-20

References

https://https://www.corporate.carrier.com/product-security/advisories-resources/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.