SSA-615116: Multiple Vulnerabilities in Apogee PXC and Talon TC Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to perform a denial of service using a out-of-bounds read forcing the device to enter a cold state and a vulnerability that would allow an attacker to decrypt the passwords of the device. Siemens recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-54090US | — | — | ||
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected… | ||||
| CVE-2024-54089US | — | — | ||
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- MitigationAPOGEE PXC Series (BACnet)
Disable telnet (Telnet is disabled by default).
- MitigationAPOGEE PXC Series (BACnet)
Use strong, hard to guess passwords
- MitigationAPOGEE PXC Series (P2 Ethernet)
Disable telnet (Telnet is disabled by default).
- MitigationAPOGEE PXC Series (P2 Ethernet)
Use strong, hard to guess passwords
- MitigationTALON TC Series (BACnet)
Disable telnet (Telnet is disabled by default).
- MitigationTALON TC Series (BACnet)
Use strong, hard to guess passwords
- Kein Fix verfügbarAPOGEE PXC Series (BACnet)
Currently no fix is available
- Kein Fix verfügbarAPOGEE PXC Series (BACnet)
Currently no fix is available
- Kein Fix verfügbarAPOGEE PXC Series (P2 Ethernet)
Currently no fix is available
- Kein Fix verfügbarAPOGEE PXC Series (P2 Ethernet)
Currently no fix is available
- Kein Fix verfügbarTALON TC Series (BACnet)
Currently no fix is available
- Kein Fix verfügbarTALON TC Series (BACnet)
Currently no fix is available
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan