SSA-615116

csafDEsiemens_psirt

SSA-615116: Multiple Vulnerabilities in Apogee PXC and Talon TC Devices

view advisory published 2025-02-11

Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to perform a denial of service using a out-of-bounds read forcing the device to enter a cold state and a vulnerability that would allow an attacker to decrypt the passwords of the device. Siemens recommends countermeasures for products where fixes are not, or not yet available.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-54090US——
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected…
CVE-2024-54089US——
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • MitigationAPOGEE PXC Series (BACnet)

    Disable telnet (Telnet is disabled by default).

  • MitigationAPOGEE PXC Series (BACnet)

    Use strong, hard to guess passwords

  • MitigationAPOGEE PXC Series (P2 Ethernet)

    Disable telnet (Telnet is disabled by default).

  • MitigationAPOGEE PXC Series (P2 Ethernet)

    Use strong, hard to guess passwords

  • MitigationTALON TC Series (BACnet)

    Disable telnet (Telnet is disabled by default).

  • MitigationTALON TC Series (BACnet)

    Use strong, hard to guess passwords

  • No fix availableAPOGEE PXC Series (BACnet)

    Currently no fix is available

  • No fix availableAPOGEE PXC Series (BACnet)

    Currently no fix is available

  • No fix availableAPOGEE PXC Series (P2 Ethernet)

    Currently no fix is available

  • No fix availableAPOGEE PXC Series (P2 Ethernet)

    Currently no fix is available

  • No fix availableTALON TC Series (BACnet)

    Currently no fix is available

  • No fix availableTALON TC Series (BACnet)

    Currently no fix is available

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan