PT-2026-146042

CVE-2026-47217

·

Published

2026-11-12

·

Updated

2026-11-12

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, a remote attacker can trigger an uncontrolled recursion and stack overflow in the default server application of bacnet-stack by abusing the Channel object. This issue has been patched in versions 1.4.4 and 1.5.1.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-400: Uncontrolled Resource Consumption
CWE-754: Improper Check for Unusual or Exceptional Conditions
CWE-20: Improper Input Validation
CWE-674: Uncontrolled Recursion
Related identifiers
CVE-2026-47217
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com