Siemens APOGEE, TALON and Desigo PXC/PXM Products
A denial of service vulnerability has been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-313313: https://cert-portal.siemens.com/productcert/html/ssa-313313.html. The products listed below use affected versions of the Nucleus software and inherently contain the vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-38371US | high7.5 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
references
External citations — patches, advisories, analysis.
- SSA-935500: Denial of Service Vulnerability in FTP Server of Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products - CSAF Versionself
- SSA-935500: Denial of Service Vulnerability in FTP Server of Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products - HTML Versionself
- ICS Advisory ICSA-22-286-12 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-286-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (46)
- MitigationAPOGEE MBC (PPC) (BACnet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MBC (PPC) (P2 Ethernet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MEC (PPC) (BACnet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MEC (PPC) (P2 Ethernet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Compact (BACnet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Compact (P2 Ethernet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Modular (BACnet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Modular (P2 Ethernet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC00-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC00-U
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC001-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC100-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC12-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC128-U
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC200-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC22-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC22.1-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC36.1-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC50-E.D
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC64-U
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXM20-E
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationTALON TC Compact (BACnet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationTALON TC Modular (BACnet)
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- No fix plannedAPOGEE MBC (PPC) (BACnet)
Currently no fix is planned
- No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)
Currently no fix is planned
- No fix plannedAPOGEE MEC (PPC) (BACnet)
Currently no fix is planned
- No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)
Currently no fix is planned
- FixedAPOGEE PXC Compact (BACnet)
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedAPOGEE PXC Compact (P2 Ethernet)
Update to V2.8.21 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedAPOGEE PXC Modular (BACnet)
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedAPOGEE PXC Modular (P2 Ethernet)
Update to V2.8.21 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedDesigo PXC00-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC00-U
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC001-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC100-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC12-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC128-U
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC200-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC22-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC22.1-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC36.1-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC50-E.D
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXC64-U
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedDesigo PXM20-E
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - FixedTALON TC Compact (BACnet)
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedTALON TC Modular (BACnet)
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan