Skip to content
OpenAdvisories
High SSA-148078 2 CVEs

SSA-148078: Multiple Vulnerabilities in APOGEE/TALON Field Panels

Published Oct 12, 2017 · Updated Jun 14, 2022 · Revision 2

Vendor: Siemens Product: APOGEE PXC Compact (BACnet) Product: APOGEE PXC Compact (P2 Ethernet) Product: APOGEE PXC Modular (BACnet) Product: APOGEE PXC Modular (P2 Ethernet) Product: TALON TC Compact (BACnet) Product: TALON TC Modular (BACnet)

Summary

Multiple vulnerabilities in the APOGEE PXC and TALON TC series of products could allow unauthenticated attackers to download sensitive information through the integrated webserver.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.

Vulnerabilities 2

  • High 7.5
    CVE-2017-9946 EPSS 25%

    A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V…

  • Medium 5.3
    CVE-2017-9947 Public exploit

    A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V…

Revision history

  1. #2

    Added APOGEE PXC Series (P2 Ethernet) devices

  2. #1

    Publication Date

References