CVE-2025-0657CWE-129CWE-248

CVE-2025-0657

published November 27, 2025

CVSS
8.8
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver

version drv_gen5_106-01-2380, allows

malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to

return the device to network visibility.

The record
Technical detail
CVSS
8.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.8th percentile
Weaknesses
CWE-129 · Improper Validation of Array Index; CWE-248 · Uncaught Exception
Published
2025-11-27T06:15Z
References (1)
EPSS history
Timeline
  • 27 NOV 01:00Z
    ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range
    cvelistv5