PT-2025-48213 · Carrier+1 · I-Vu Gen5 Router+1

Published 2025-11-27 · Updated 2025-11-27 · CVE-2025-0657

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Automated Logic and Carrier i-Vu Gen5 router version drv gen5 106-01-2380

Description A flaw exists in Automated Logic and Carrier i-Vu Gen5 routers using driver version drv gen5 106-01-2380. Sending malformed packets through a BACnet MS/TP network can cause the devices to enter a fault state, requiring a manual power cycle to restore network connectivity.

Recommendations Update to a newer driver version to address this issue.

Fix

Improper Validation of Array Index

Weakness Enumeration

CWE-129

CWE-248

Related Identifiers

CVE-2025-0657

Affected Products

Automated Logic I-Vu Gen5 Router

I-Vu Gen5 Router

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-0657 · Security Note
• https://twitter.com/CVEnew/status/1993875068405813605 · Twitter Post
• https://t.me/cveNotify/144155 · Telegram Post
• https://corporate.carrier.com/product-security/advisories-resources · Note
• https://t.me/CVEtracker/38348 · Telegram Post