CVE-2025-0657: Automated Logic GEN5 Controllers

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network visibility.

Affected products

• Automated Logic GEN5 Controllers
• Automated Logic Webctrl: up to and including 8.5
• Carrier I-Vu: up to and including 8.5

Published 2025-11-27. Last modified 2026-06-17.