Medium SSA-916339 1 CVE

SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices

Published Sep 9, 2025 · Updated Sep 9, 2025

Vendor: Siemens Product: APOGEE PXC Series (BACnet) Product: APOGEE PXC Series (P2 Ethernet) Product: TALON TC Series (BACnet)

Summary

Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file.

Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Medium 5.3

CVE-2025-40757

A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All …

Siemens APOGEE PXC Series (BACnet) TALON TC Series (BACnet) APOGEE PXC Series (P2 Ethernet) ICS / OT

Sep 9, 2025

Revision history

2025-09-09 #1
Publication Date

References

SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-916339.html