carrier Zone Controllers vulnerabilities

Latest carrier Zone Controllers CVEs

Newest publication first

1. CVE-2025-0658 Automated Logic and Carrier Zone Controllers malformed packets denial of service

   Published 2025-11-27

   High·CVSS 8.7 EPSS 0.36%

   A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault state; after a reset, a second packet can leave it permanently unresponsive until a manual power cycle is performed.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.