bacnetstack records
9 published records for vendor bacnetstack.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 66.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-125 Out-of-bounds Read5
- CWE-126 Buffer Over-read1
- CWE-193 Off-by-one Error1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2023-51773No exploit | BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.bacnetstack · bacnet stack · CWE-126 | Critical9.1 | — | 1.1% | Feb 28, 2024 |
34Monitor | CVE-2026-41475No exploit | BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parserbacnetstack · bacnet stack · CWE-125 | High8.7 | — | 0.7% | Apr 24, 2026 |
34Monitor | CVE-2026-41503No exploit | BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parserbacnetstack · bacnet stack · CWE-125 | High8.7 | — | 0.6% | Apr 24, 2026 |
34Monitor | CVE-2026-41502No exploit | BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoderbacnetstack · bacnet stack · CWE-125 | High8.7 | — | 0.6% | Apr 24, 2026 |
31Monitor | CVE-2026-26264No exploit | BACnet Stack WriteProperty decoding length underflow leads to OOB read and crashbacnetstack · bacnet stack · CWE-125 | High7.8 | — | 0.5% | Feb 13, 2026 |
30Monitor | CVE-2025-66624No exploit | BACnet-stack MS/TP reply matcher OOB readbacnetstack · bacnet stack · CWE-125 | High7.5 | — | 0.4% | Dec 5, 2025 |
30Monitor | CVE-2026-21878No exploit | BACnet Stack Improperly Limits Pathnames to a Restricted Directorybacnetstack · bacnet stack · CWE-22 | High7.5 | — | 0.4% | Feb 13, 2026 |
22Monitor | CVE-2026-21870No exploit | The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_stringbacnetstack · bacnet stack · CWE-193 | Medium5.5 | — | 0.3% | Feb 13, 2026 |
14Monitor | CVE-2026-40279No exploit | BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`bacnetstack · bacnet stack · CWE-758 | Low3.7 | — | 0.3% | Apr 21, 2026 |
- CVE-2023-5177336Monitor
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
CriticalCVSS 9.1No exploitEPSS 1%bacnetstack · bacnet stackFeb 28, 2024
- CVE-2026-4147534Monitor
BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser
HighCVSS 8.7No exploitEPSS 1%bacnetstack · bacnet stackApr 24, 2026
- CVE-2026-4150334Monitor
BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser
HighCVSS 8.7No exploitEPSS 1%bacnetstack · bacnet stackApr 24, 2026
- CVE-2026-4150234Monitor
BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder
HighCVSS 8.7No exploitEPSS 1%bacnetstack · bacnet stackApr 24, 2026
- CVE-2026-2626431Monitor
BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash
HighCVSS 7.8No exploitEPSS 1%bacnetstack · bacnet stackFeb 13, 2026
- CVE-2025-6662430Monitor
BACnet-stack MS/TP reply matcher OOB read
HighCVSS 7.5No exploitEPSS 0%bacnetstack · bacnet stackDec 5, 2025
- CVE-2026-2187830Monitor
BACnet Stack Improperly Limits Pathnames to a Restricted Directory
HighCVSS 7.5No exploitEPSS 0%bacnetstack · bacnet stackFeb 13, 2026
- CVE-2026-2187022Monitor
The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string
MediumCVSS 5.5No exploitEPSS 0%bacnetstack · bacnet stackFeb 13, 2026
- CVE-2026-4027914Monitor
BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`
LowCVSS 3.7No exploitEPSS 0%bacnetstack · bacnet stackApr 21, 2026