This vulnerability involves an out-of-bounds read in the BACnet packet parsing code (`bacdt_datetime_to_tod`) in Loytec devices including LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, and L-PAD running firmware through 8.4.18 on the LINX-A64 platform. The issue is triggered by sending a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet with an invalid month value, which leads to reading memory outside the intended bounds. This results in a crash of the `linx_a64.exe` process and can cause the device to reboot. The vulnerability is remotely exploitable without authentication.

Successful exploitation allows an unauthenticated remote attacker to cause a denial of service by crashing the main executable process and rebooting the affected device. This disrupts device availability and potentially impacts building automation or control systems relying on these Loytec products.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing network-level protections to block malformed BACnet TimeSynchronization or UTC-TimeSynchronization packets from untrusted sources. Monitor vendor communications for updates on official patches or mitigations.