Siemens Apogee PXC and Talon TC Devices
view advisory published 2025-09-09
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40757US | — | — | ||
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices - CSAF Versionself
- SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices - HTML Versionself
- ICS Advisory ICSA-25-254-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-254-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (6)
- MitigationAPOGEE PXC Series (BACnet)
Disable telnet (telnet is disabled by default).
- MitigationAPOGEE PXC Series (P2 Ethernet)
Disable telnet (telnet is disabled by default).
- MitigationTALON TC Series (BACnet)
Disable telnet (telnet is disabled by default).
- No fix availableAPOGEE PXC Series (BACnet)
Currently no fix is available
- No fix availableAPOGEE PXC Series (P2 Ethernet)
Currently no fix is available
- No fix availableTALON TC Series (BACnet)
Currently no fix is available
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan