CVE-2025-40555

mediumPriorität · verfolgen · 0EPSS 0.002 · 12. PerzentilDEEUNLUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.22% (12th) EPSS

CVSS 4.7 · medium

Is it mine?

548 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · cisa_csaf_ot · ncsc_nl

EPSS · bewertet 2026-10-27

A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions). Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted device, and potentially reduce the availability of BACnet network. A power cycle is required to restore the device's normal operation.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Der Hersteller plant keinen Fix; mindern oder ersetzen.

Kein Fix geplantAPOGEE PXC+TALON TC Series (BACnet)siemens_psirt
Currently no fix is planned
Kein Fix geplantAPOGEE PXC+TALON TC Series (BACnet)cisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 1.3–5.3

v3.14.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lsecondary · productcert@siemens.com DEAusnutzbarkeit 2.8 · Auswirkung 1.4

v3.14.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lsecondary · CISA US

v3.14.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lsecondary · Siemens ProductCERT DE

v3.14.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lsecondary · NCSC-NL NL

v4.05.3mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:Lsecondary · ENISA EU

v4.05.3mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.01.3lowCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-440USCWE-440USCWE-440USCWE-440US

betroffene Produkte (548)

Betroffene Produkte und Versionsbereiche.

APOGEE PXC+TALON TC Series (BACnet)alle Versionencisa_csaf_otUS
Siemens APOGEE PXC+TALON TC Series (BACnet)≤ vers:all/*cisa_csaf_otUS
Siemens APOGEE PXC+TALON TC Series (BACnet)0 → *enisa_euvdEU
Siemens INTRALOG WMS≤ vers:siemens/4ncsc_nlNL
Siemens INTRALOG WMS≤ vers:unknown/<v4ncsc_nlNL
Siemens JT2Go (Application)≤ vers:siemens/2312.0005ncsc_nlNL
Siemens RUGGEDCOM APE1808≤ vers:all/*ncsc_nlNL
Siemens RUGGEDCOM APE1808 Firmware≤ vers:unknown/nonencsc_nlNL
Siemens RUGGEDCOM APE1808 Firmware≤ vers:siemens/7.4.5ncsc_nlNL
Siemens RUGGEDCOM CROSSBOW≤ vers:all/<v5.6ncsc_nlNL
Siemens RUGGEDCOM CROSSBOW (Application)≤ vers:unknown/nonencsc_nlNL
Siemens RUGGEDCOM M2100≤ vers:all/<v4.3.11ncsc_nlNL
Siemens RUGGEDCOM M2100≤ vers:unknown/nonencsc_nlNL
Siemens RUGGEDCOM M2100NC≤ vers:unknown/nonencsc_nlNL
Siemens RUGGEDCOM M2200≤ vers:all/<v4.3.11ncsc_nlNL
Siemens RUGGEDCOM M969≤ vers:unknown/nonencsc_nlNL
Siemens RUGGEDCOM M969≤ vers:all/<v4.3.11ncsc_nlNL
Siemens RUGGEDCOM M969NC≤ vers:unknown/nonencsc_nlNL
Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)≤ vers:all/<v8.2ncsc_nlNL
Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)≤ vers:all/<v8.2ncsc_nlNL

20 von 548 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2025-0160Kwetsbaarheden verholpen in Siemens productenNL2025-05-14csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Apogee, BacNet ATEC, Desigo CC, Intralog, OZW, Polarion, RUGGEDCOM, SICAM, SIMATIC, SIPROTEC, SIRIUS, Teamcenter en Versicharge
SSA-718393SSA-718393: Partial Denial of Service Vulnerability in APOGEE PXC and TALON TC Series (BACnet) Devices2025-05-13csaf · siemens_psirtDE
APOGEE PXC and TALON TC Series (BACnet) Devices devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted device, and potentially reduce the availability of BACnet network. A power cycle is required to restore the device's normal operation. Siemens recommends countermeasures for products where fixes are not, or not yet available.
ICSA-25-135-14Siemens APOGEE PXC and TALON TC Series2025-05-13icsa · cisa_csaf_otUS
APOGEE PXC and TALON TC Series (BACnet) Devices devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted device, and potentially reduce the availability of BACnet network. A power cycle is required to restore the device's normal operation. Siemens recommends countermeasures for products where fixes are not, or not yet available.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2025-05-13geändert 2026-06-17

Referenzen (3)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan