CVE-2025-40556
MEDIUMSiemens BACnet ATEC 550-440, 550-441, 550-445, 550-446 - Denial of Service via BACnet MSTP Message
Title source: llmDescription
A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versions). Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service condition of the targeted device. A power cycle is required to restore the device's normal operation.
References (1)
Core 1
Core References
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-828116.html
Scores
CVSS v3
6.5
EPSS
0.0013
EPSS Percentile
32.2%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-20
Status
published
Products (4)
Siemens/BACnet ATEC 550-440
Siemens/BACnet ATEC 550-441
Siemens/BACnet ATEC 550-445
Siemens/BACnet ATEC 550-446
Published
May 13, 2025
Tracked Since
Feb 18, 2026