No system out there is impenetrable. But BACnet, an ANSI/ASHRAE and global ISO standard that covers a rage of IoT, IP and operational technology devices, is exploitable. The more than 25 million BACnet devices — which include HVAC, lighting controls, ACS, mart meters, elevator controls, UPS and other building automation systems — are easy points of entry even for a novice hacker.
Critical internet-connected smart building devices used in countless commercial and industrial properties, have been found to be vulnerable to a new malicious attack, according to cybersecurity researcher Bertin Bervis.The vulnerability exploits the properties in the building automation protocol (Bacnet) which enables technicians and engineers performing monitoring, setup changes and remote control of a wide range of key smart systems that impact temperature control, and other monitoring systems. Bervis analyzed several building automation devices with built-in web applications for remote monitoring and control.
