Description
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain an out-of-bounds read in the memory dump function.
This could allow an attacker with Medium (MED) or higher privileges to cause the device to enter an insecure cold start state.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | APOGEE PXC Series (BACnet) | — | — |
| Siemens | APOGEE PXC Series (P2 Ethernet) | — | — |
| Siemens | TALON TC Series (BACnet) | — | — |
Advisories 4
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- ICSA-25-044-11 Siemens Apogee PXC100 Devices CISA ICS & IT advisories · Feb 11, 2025
- SSA-615116 SSA-615116: Multiple Vulnerabilities in Apogee PXC and Talon TC Devices Siemens ProductCERT · Feb 11, 2025