Skip to content
OpenAdvisories
Critical SSA-114589 13 CVEs

SSA-114589: Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products

Published Nov 9, 2021 · Updated May 10, 2022 · Revision 4

Vendor: Siemens Product: APOGEE MBC (PPC) (BACnet) Product: APOGEE MBC (PPC) (P2 Ethernet) Product: APOGEE MEC (PPC) (BACnet) Product: APOGEE MEC (PPC) (P2 Ethernet) Product: APOGEE PXC Compact (BACnet) Product: APOGEE PXC Compact (P2 Ethernet) Product: APOGEE PXC Modular (BACnet) Product: APOGEE PXC Modular (P2 Ethernet) Product: Desigo PXC00-E.D Product: Desigo PXC00-U Product: Desigo PXC001-E.D Product: Desigo PXC100-E.D Product: Desigo PXC12-E.D Product: Desigo PXC128-U Product: Desigo PXC200-E.D Product: Desigo PXC22-E.D Product: Desigo PXC22.1-E.D Product: Desigo PXC36.1-E.D Product: Desigo PXC50-E.D Product: Desigo PXC64-U Product: Desigo PXM20-E Product: TALON TC Compact (BACnet) Product: TALON TC Modular (BACnet)

Summary

Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf.

The products listed below use affected versions of the Nucleus software and inherently contain these vulnerabilities.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 13

Revision history

  1. #4

    Added solutions for APOGEE PXC Compact (P2 Ethernet), APOGEE PXC Modular (P2 Ethernet), Desigo PXC Products, Desigo PXM Products

  2. #3

    Added solutions for APOGEE PXC Compact (BACnet), APOGEE PXC Modular (BACnet), TALON TC Compact (BACnet), and TALON TC Modular (BACnet) products

  3. #2

    Added affected Desigo PXC/PXM products; updated corresponding mitigation measures; informed about planned solutions

  4. #1

    Publication Date

References