| Protocol | BACnet/IP |
|---|---|
| Name | BACnet/IP |
| Aliases | BACnet |
| Description | Building automation and control network communication protocol for HVAC systems |
| Keywords | HVAC |
| Port(s) | 47808/udp |
| Access to specs | Paid |
| Specifications | BACnet/IP Specification |
| Nmap script(s) | bacnet-info.nse |
| Wireshark dissector | packet-bacnet.c |
| Example Pcap(s) | ICS-pcap BACnet, S4x15 ICS Village PCAP Files |
| Related CVE | CVE-2018-10238, CVE-2018-18878, CVE-2019-12480, CVE-2021-41545, CVE-2023-38405, CVE-2023-51773 |
- 10 things you should know about BACnet - Blog post on RTAutomation
- BACnet CVE-2019-12480 - On M's blog (2019)
- BACnet data representation - Blog post on RTAutomation
- (in)Security in Building Automation: How to Create Dark Buildings with Light Speed - Thomas Brandstetter @ Black Hat USA (2017)
- DEF CON Safe Mode Red Team Village - Chris Kubecka - Pwn the World - @ DEF CON (2020)
- HVACking Understand the Delta Between Security and Reality - Douglas McKee & Mark Bereza @ DEF CON 27 (2019)
- InSecurity in Building Automation - Thomas Brandsetter @ DEF CON 25 ICS Village (2017)
- Mixing industrial protocols with web application security - Bertin Bervis @ DEF CON 27 IoT Village (2019)
- Owning a Building: Exploiting Access Control and Facility Management Systems - Billy Rios @ Black Hat Asia (2014)
- BACnet Stack - BACnet open source protocol stack
- bacnet-docker - BACnet Tools in Docker