Summary
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file.
Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
Medium 5.3
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All …
Revision history
-
#1
Publication Date
References
-
SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-916339.html
-
ICS Advisory ICSA-25-254-05 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-05
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B