CVE-2025-40556 — Siemens / BACnet ATEC 550-440

Description (CNA)

A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versions). Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service condition of the targeted device. A power cycle is required to restore the device's normal operation.

Affected (CNA)

Vendor / product	Versions
Siemens / BACnet ATEC 550-440	affected 0 before *
Siemens / BACnet ATEC 550-441	affected 0 before *
Siemens / BACnet ATEC 550-445	affected 0 before *
Siemens / BACnet ATEC 550-446	affected 0 before *

CWE

CWE-20

References

https://cert-portal.siemens.com/productcert/html/ssa-828116.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.