OT-BACNETImpact

BACnet Building Automation Write

Unauthenticated BACnet (UDP/47808) accepts WriteProperty / Reinitialise — switch HVAC, override alarms, brick controllers.

§ Where this technique fits

OT-BACNET is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 4 on average.

§ Dossiers chaining this technique

BACnet HVAC → disrupt building operations
BACnet on UDP/47808 is unauthenticated. From a foothold in corporate IT, write to HVAC controllers — over-cool a data centre, disable smoke evacuation, mess with elevators.
step 4 / 5

§ What commonly comes next

01
Data Encrypted for Impact
T1486 · Impact
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

BACnet HVAC → disrupt building operations

§ What commonly comes next