Skip to content
OpenAdvisories
High · 8.7 CVE-2025-0658 EUVD-2025-199780GHSA-x68q-wm6j-wxhc

Automated Logic and Carrier Zone Controllers malformed packets denial of service

Published Nov 27, 2025 · Updated Nov 28, 2025 · Assigned by Carrier

Description

A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol
causes the device to crash. The device enters a fault state; after a reset,
a second packet can leave it permanently unresponsive until a manual power cycle
is performed.

Affected products

VendorProductAffectedFixed
Automated Logic Zone Controllers < 6.06-101 6.06-101
Carrier Zone Controllers < 6.06-101 6.06-101

References