SSA-436469: TCP Vulnerability in APOGEE/TALON Field Panels
view advisory published 2022-12-13
A TCP sequence vulnerability in the APOGEE PXC and TALON TC series of products could allow an attacker to execute a denial of service attack by sending specially crafted packets to the device. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-28388US | medium5.3OT elevated | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- FixedAPOGEE PXC Series (BACnet)
Update to V3.5.5 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedAPOGEE PXC Series (P2 Ethernet)
Update to V2.8.20 or later version
https://partnerportal.extranet.dc.siemens.com/ - FixedTALON TC Series (BACnet)
Update to V3.5.5 or later version
https://partnerportal.extranet.dc.siemens.com/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan