PatchTheCVEbacnet protocol stack vulnerabilities and fixes
Recent CVEs affecting bacnet protocol stack, with upgrade or downgrade steps. 2 tracked.
Also searched as: bacnetprotocolstack.
bacnet protocol stack has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-05-30. Highest priority: CVE-2019-12480 (score 61/100).
- CVE-2019-12480 HIGH 7.5 UPGRADE BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer
- CVE-2018-10238 CRITICAL 9.8 DOWNGRADE bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a la
FAQ
How do I fix bacnet protocol stack vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bacnet protocol stack being exploited right now?
None of the tracked bacnet protocol stack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bacnet protocol stack CVE should I patch first?
CVE-2019-12480 currently ranks highest (61/100): BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer.