Unauthorized File Access Vulnerability in BACnet Devices

CVE-2025-41753

What is CVE-2025-41753?

This vulnerability arises from inadequate validation of dynamically created BACnet File Object names, allowing an unauthenticated remote attacker to exploit this weakness. The attacker is able to manipulate file paths, resulting in the potential for unauthorized access to arbitrary files outside the intended directory. This misconfiguration may lead to the reading or overwriting of sensitive files, leaving systems vulnerable and ultimately enabling full compromise of affected devices.

References