bacnet-stack — Vulnerabilities & Security Advisories 8

BACnet-stack is an open-source implementation of the BACnet protocol for building automation and control systems, enabling communication between HVAC, lighting, and other IoT devices. Historically, it has been vulnerable to multiple remote code execution flaws, buffer overflows, and denial-of-service conditions, often due to improper input validation in protocol parsing. While no major public incidents have been widely documented, the 8 recorded CVEs highlight persistent security risks in industrial environments. The stack's exposure to network-based attacks makes it a potential entry point for lateral movement in critical infrastructure, though its relatively small footprint limits widespread exploitation compared to larger industrial control system frameworks.