Resource exhaustion in Bacnet Interoperability Test Services, Inc. Server
CVE-2020-36872
BACnet Test Server versions up to and including 1.01 contains a remote denial of service vulnerability in its BACnet/IP BVLC packet handling. The server fails to properly validate the BVLC Length field in incoming UDP BVLC frames on the default BACnet port (47808/udp). A remote unauthenticated attacker can send a malformed BVLC Length value to trigger an access violation and crash the application, resulting in a denial of service.
Vulnerability class: DoS (Denial of Service)
Published · last modified .
EPSS exploit prediction
EPSS: 0.005 (40.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 40th percentile — 40.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: +0.000
Affected products
- Bacnet Interoperability Test Services, Inc. Server — versions 0
Weakness classification (CWE)
References
- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5597.php (technical-description, exploit)
- www.exploit-db.com/exploits/48860 (exploit)
- packetstormsecurity.com/files/159504 (exploit)
- cxsecurity.com/issue/WLB-2020100045 (exploit)
- www.bac-test.com/ (product)
- www.vulncheck.com/advisories/bacnet-test-server-malformed-bvlc-length-dos (third-party-advisory)