CVE-2026-104204: BACnet Stack: Structured View subordinate-list[0] WriteProperty allows unbounded synchronous resize and remote unauthenticated DoS
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.6.1, there is a server-side denial-of-service issue affecting the Structured View object implementation. This issue has been patched in versions 1.6.1 and 1.7.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.6.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.7.0
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using the BACnet Stack Structured View object implementation are affected if they run a version earlier than 1.6.1.
Does exploitation require authentication?
No. The issue is described as remotely exploitable without authentication, allowing an attacker to cause a denial of service through the affected server-side functionality.
Which releases contain the fix?
The issue is patched in BACnet Stack versions 1.6.1 and 1.7.0. Systems running a release prior to 1.6.1 should be treated as affected.