CVE-2025-0658

Description

A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault state; after a reset, a second packet can leave it permanently unresponsive until a manual power cycle is performed.

PUBLISHED Reserved 2025-01-22 | Published 2025-11-27 | Updated 2025-11-28 | Assigner Carrier

Problem types

CWE-20 Improper Input Validation

Product status

Credits

Christopher Morales Gonzalez reporter

References

https/....carrier.com/product-security/advisories-resources/

cve.org (CVE-2025-0658)

nvd.nist.gov (CVE-2025-0658)

Download JSON