CVE-2020-36872 - BACnet Test Server 1.01 Malformed BVLC Length DoS

CVE ID : CVE-2020-36872 Published : Nov. 26, 2025, 11:15 p.m. | 18 minutes ago Description : BACnet Test Server versions up to and including 1.01 contains a remote denial of service vulnerability in its BACnet/IP BVLC packet handling. The server fails to properly validate the BVLC Length field in incoming UDP BVLC frames on the default BACnet port (47808/udp). A remote unauthenticated attacker can send a malformed BVLC Length value to trigger an access violation and crash the application, resulting in a denial of service. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor