Description
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5 | APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5 | — |
Advisories 2
- ICSA-17-285-05 Siemens BACnet Field Panels (Update A) CISA ICS & IT advisories · Jun 14, 2022
- SSA-148078 SSA-148078: Multiple Vulnerabilities in APOGEE/TALON Field Panels Siemens ProductCERT · Jun 14, 2022