ICSA-26-295-08

icsaUScisa_csaf_ot

Siemens APOGEE, TALON and Desigo PXC/PXM Products

view advisory published 2026-10-13

The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2026-89208DEmedium5.3—
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions…
CVE-2026-102076DEhigh7.5—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
CVE-2026-102075DEhigh7.5—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
CVE-2026-102074DEhigh7.5—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
CVE-2026-102073DEhigh8.2—
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC…
02

references

External citations — patches, advisories, analysis.

03

remediations (106)

  • MitigationAPOGEE MBC (PPC) (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (P2 Ethernet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC00-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC00-U

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC001-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC100-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC12-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC128-U

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC200-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC22-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC22.1-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC36.1-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC50-E.D

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXC64-U

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationDesigo PXM20-E

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Compact (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Compact (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Compact (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Compact (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Modular (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Modular (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Modular (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Modular (BACnet)

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • No fix plannedAPOGEE MBC (PPC) (BACnet)

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (BACnet)

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (BACnet)

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (BACnet)

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (BACnet)

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (BACnet)

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (BACnet)

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (BACnet)

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)

    Currently no fix is planned

  • No fix plannedDesigo PXC00-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC00-U

    Currently no fix is planned

  • No fix plannedDesigo PXC001-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC100-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC12-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC128-U

    Currently no fix is planned

  • No fix plannedDesigo PXC200-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC22-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC22.1-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC36.1-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC50-E.D

    Currently no fix is planned

  • No fix plannedDesigo PXC64-U

    Currently no fix is planned

  • No fix plannedDesigo PXM20-E

    Currently no fix is planned

  • FixedAPOGEE PXC Compact (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (P2 Ethernet)

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (P2 Ethernet)

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (P2 Ethernet)

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (P2 Ethernet)

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (P2 Ethernet)

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (P2 Ethernet)

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (P2 Ethernet)

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (P2 Ethernet)

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Compact (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Compact (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Compact (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Compact (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Modular (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Modular (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Modular (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Modular (BACnet)

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan