CVE-2025-0657 - CVE House
Back to Database
Status published High CVE-2025-0657

ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range

Vulnerability Description

A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network visibility.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0657

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Christopher Morales Gonzalez

Affected Vendor

Automated Logic

View all reports →

Affected Software

WebCtrl, Gen5 Controllers, i-Vu
Vulnerable Versions:
0

Timeline

Official Publish: November 27th, 2025
Last Modified: November 28th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)