Vulnerability in Automated Logic Gen5 Controllers
CVE-2025-0657
A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network visibility.
EPSS: 0.003 (25.1th percentile) — read the EPSS interpretation.
Affected products
- Automated Logic Gen5 Controllers — versions 0
- Automated Logic Webctrl — versions 0
- Carrier I-vu — versions 0