Siemens Apogee PXC100 Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to perform a denial of service using a out-of-bounds read forcing the device to enter a cold state and a vulnerability that would allow an attacker to decrypt the passwords of the device. Siemens recommends countermeasures for products where fixes are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54090US | — | — | ||
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected… | ||||
| CVE-2024-54089US | — | — | ||
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected… | ||||
references
External citations — patches, advisories, analysis.
- SSA-615116: Multiple Vulnerabilities in Apogee PXC and Talon TC Devices - CSAF Versionself
- SSA-615116: Multiple Vulnerabilities in Apogee PXC and Talon TC Devices - HTML Versionself
- ICS Advisory ICSA-25-044-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-044-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationAPOGEE PXC Series (BACnet)
Disable telnet (Telnet is disabled by default).
- MitigationAPOGEE PXC Series (BACnet)
Use strong, hard to guess passwords
- MitigationAPOGEE PXC Series (P2 Ethernet)
Disable telnet (Telnet is disabled by default).
- MitigationAPOGEE PXC Series (P2 Ethernet)
Use strong, hard to guess passwords
- MitigationTALON TC Series (BACnet)
Disable telnet (Telnet is disabled by default).
- MitigationTALON TC Series (BACnet)
Use strong, hard to guess passwords
- No fix availableAPOGEE PXC Series (BACnet)
Currently no fix is available
- No fix availableAPOGEE PXC Series (BACnet)
Currently no fix is available
- No fix availableAPOGEE PXC Series (P2 Ethernet)
Currently no fix is available
- No fix availableAPOGEE PXC Series (P2 Ethernet)
Currently no fix is available
- No fix availableTALON TC Series (BACnet)
Currently no fix is available
- No fix availableTALON TC Series (BACnet)
Currently no fix is available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan