VDB

CISA-2025-40556

CISA-2025-40556 PUBLISHED CVSS 6.5 MEDIUM

Reported by siemens · Published May 13, 2025

A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versions). Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service condition of the targeted device. A power cycle is required to restore the device's normal operation.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
SiemensBACnet ATEC 550-4400
SiemensBACnet ATEC 550-4410
SiemensBACnet ATEC 550-4450
SiemensBACnet ATEC 550-4460
SiemensBACnet ATEC 550-4410, 0
SiemensBACnet ATEC 550-4400, 0
SiemensBACnet ATEC 550-4460, 0
SiemensBACnet ATEC 550-4450, 0

Timeline

  • May 13, 2025 CVE Published
  • May 13, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›