bacnet-stack BACnet Stack up to 1.4.5/1.5.1/1.6.0 WebSocket Server websocket-srv.c bws_srv_start certificate validation

Summaryinfo

A vulnerability categorized as problematic has been discovered in bacnet-stack BACnet Stack up to 1.4.5/1.5.1/1.6.0. The affected element is the function bws_srv_start of the file ports/linux/websocket-srv.c of the component WebSocket Server. The manipulation results in certificate validation. This vulnerability is identified as CVE-2026-102612. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in bacnet-stack BACnet Stack up to 1.4.5/1.5.1/1.6.0. Affected is the function bws_srv_start of the file ports/linux/websocket-srv.c of the component WebSocket Server. The manipulation with an unknown input leads to a certificate validation vulnerability. CWE is classifying the issue as CWE-295. The product does not validate, or incorrectly validates, a certificate. This is going to have an impact on integrity. CVE summarizes:

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, bws_srv_start() in ports/linux/websocket-srv.c builds the libwebsockets server context with a CA certificate loaded but never sets LWS_SERVER_OPTION_REQUIRE_VALID_OPENSSL_CLIENT_CERT, so the hub accepts TLS connections from clients presenting no certificate at all. Any network-reachable host can join the BACnet/SC mesh without credentials. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2026-102612 since 09/29/2026. The exploitability is told to be difficult. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1587.003.

Upgrading to version 1.4.6, 1.5.2, 1.6.1 or 1.7.0 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• bacnet-stack

Name

• BACnet Stack

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.4.0
• 1.4.1
• 1.4.2
• 1.4.3
• 1.4.4
• 1.4.5
• 1.5
• 1.5.0
• 1.5.1
• 1.6.0

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion