SSA-916339

csafDEsiemens_psirt

SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices

Advisory ansehen veröffentlicht 2025-09-09

Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-40757US——
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationAPOGEE PXC Series (BACnet)

    Disable telnet (telnet is disabled by default).

  • MitigationAPOGEE PXC Series (P2 Ethernet)

    Disable telnet (telnet is disabled by default).

  • MitigationTALON TC Series (BACnet)

    Disable telnet (telnet is disabled by default).

  • Kein Fix verfügbarAPOGEE PXC Series (BACnet)

    Currently no fix is available

  • Kein Fix verfügbarAPOGEE PXC Series (P2 Ethernet)

    Currently no fix is available

  • Kein Fix verfügbarTALON TC Series (BACnet)

    Currently no fix is available

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan