CVE-2026-55732

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.19 Loytec L-INX versions prior to 8.4.19 Loytec L-GATE versions prior to 8.4.19 Loytec L-ROC versions prior to 8.4.19 Loytec L-IOB versions prior to 8.4.19 Loytec L-DALI versions prior to 8.4.19 Loytec L-VIS versions prior to 8.4.19 Loytec L-PAD versions prior to 8.4.19

Description An out-of-bounds read occurs during BACnet packet parsing within the bacdt datetime to tod() function. An unauthenticated remote attacker can cause the linx a64.exe process to crash, leading to a device reboot, by sending a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet containing an invalid month value.

Recommendations Update LIP-ME201C to version 8.4.19 or later. Update L-INX to version 8.4.19 or later. Update L-GATE to version 8.4.19 or later. Update L-ROC to version 8.4.19 or later. Update L-IOB to version 8.4.19 or later. Update L-DALI to version 8.4.19 or later. Update L-VIS to version 8.4.19 or later. Update L-PAD to version 8.4.19 or later.