SSA-148078: Multiple Vulnerabilities in APOGEE/TALON Field Panels
Multiple vulnerabilities in the APOGEE PXC and TALON TC series of products could allow unauthenticated attackers to download sensitive information through the integrated webserver. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-9947US | medium5.3 | Exploit | ||
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote… | ||||
| CVE-2017-9946US | high7.5 | — | ||
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web se… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (24)
- MitigationAPOGEE PXC Compact (BACnet)
Please contact your local Siemens office for additional support
- MitigationAPOGEE PXC Compact (BACnet)
Please contact your local Siemens office for additional support
- MitigationAPOGEE PXC Compact (P2 Ethernet)
Disable the integrated webserver
- MitigationAPOGEE PXC Compact (P2 Ethernet)
Disable the integrated webserver
- MitigationAPOGEE PXC Modular (BACnet)
Please contact your local Siemens office for additional support
- MitigationAPOGEE PXC Modular (BACnet)
Please contact your local Siemens office for additional support
- MitigationAPOGEE PXC Modular (P2 Ethernet)
Disable the integrated webserver
- MitigationAPOGEE PXC Modular (P2 Ethernet)
Disable the integrated webserver
- MitigationTALON TC Compact (BACnet)
Please contact your local Siemens office for additional support
- MitigationTALON TC Compact (BACnet)
Please contact your local Siemens office for additional support
- MitigationTALON TC Modular (BACnet)
Please contact your local Siemens office for additional support
- MitigationTALON TC Modular (BACnet)
Please contact your local Siemens office for additional support
- Kein Fix geplantAPOGEE PXC Compact (P2 Ethernet)
Currently no fix is planned
- Kein Fix geplantAPOGEE PXC Compact (P2 Ethernet)
Currently no fix is planned
- Kein Fix geplantAPOGEE PXC Modular (P2 Ethernet)
Currently no fix is planned
- Kein Fix geplantAPOGEE PXC Modular (P2 Ethernet)
Currently no fix is planned
- BehobenAPOGEE PXC Compact (BACnet)
Update to V3.5 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Compact (BACnet)
Update to V3.5 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (BACnet)
Update to V3.5 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (BACnet)
Update to V3.5 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Compact (BACnet)
Update to V3.5 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Compact (BACnet)
Update to V3.5 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Modular (BACnet)
Update to V3.5 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Modular (BACnet)
Update to V3.5 or later version
https://partnerportal.extranet.dc.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan