Approved changes feed: RSS · Atom

cpe:2.3:a:bacnet_protocol_stack_project:bacnet_protocol_stack:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBacnet Protocol Stack Project (df648cf3-afad-5957-bd4d-e687e389ca0f)
ProductBacnet Protocol Stack (21cfdadd-2f0e-5d4d-bf5b-e96252c4cd67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bacnet-stack/bacnet-stack purl2cpe 2026-06-01 10:16:57.008514
pkg:sourceforge/bacnet purl2cpe 2026-06-01 10:16:57.008518

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-51773 vulnerable 2026-06-08 06:17:53.897168 Details available
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
Published: 2023-12-25T00:00:00.000Z
Updated: 2024-08-02T22:48:11.271Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12480 vulnerable 2026-06-08 05:12:39.196272 Details available
BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a malformed DCC in AtomicWriteFile, AtomicReadFile and DeviceCommunicationControl services. An unauthenticated remote attacker could cause a denial of service (bacserv daemon crash) because there is an invalid read in bacdcode.c during parsing of alarm tag numbers.
Published: 2019-05-30T21:53:09.000Z
Updated: 2024-08-04T23:24:38.525Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.