CVE-2025-40757

mediumPriorität · verfolgen · 0EPSS 0.003 · 18. PerzentilDEEUNLUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.27% (18th) EPSS

CVSS 5.3 · medium

Is it mine?

23 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · cisa_csaf_ot · ncsc_nl

EPSS · bewertet 2026-10-27

A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices connected to the network allow unrestricted access to sensitive files, such as databases. This could allow an attacker to download encrypted .db file containing passwords.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationAPOGEE PXC Series (BACnet)siemens_psirt
Disable telnet (telnet is disabled by default).
MitigationAPOGEE PXC Series (P2 Ethernet)siemens_psirt
Disable telnet (telnet is disabled by default).
MitigationTALON TC Series (BACnet)siemens_psirt
Disable telnet (telnet is disabled by default).
MitigationAPOGEE PXC Series (BACnet)cisa_csaf_ot
Disable telnet (telnet is disabled by default).
MitigationAPOGEE PXC Series (P2 Ethernet)cisa_csaf_ot
Disable telnet (telnet is disabled by default).
MitigationTALON TC Series (BACnet)cisa_csaf_ot
Disable telnet (telnet is disabled by default).
Kein Fix verfügbarAPOGEE PXC Series (BACnet)siemens_psirt
Currently no fix is available
Kein Fix verfügbarAPOGEE PXC Series (P2 Ethernet)siemens_psirt
Currently no fix is available
Kein Fix verfügbarTALON TC Series (BACnet)siemens_psirt
Currently no fix is available
Kein Fix verfügbarAPOGEE PXC Series (BACnet)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarAPOGEE PXC Series (P2 Ethernet)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarTALON TC Series (BACnet)cisa_csaf_ot
Currently no fix is available

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 1.7–6.3

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · productcert@siemens.com DEAusnutzbarkeit 3.9 · Auswirkung 1.4

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · CISA US

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · Siemens ProductCERT DE

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · NCSC-NL NL

v4.06.3mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.06.3mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.01.7lowCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-200USCWE-200USCWE-200USCWE-200US

betroffene Produkte (23)

Betroffene Produkte und Versionsbereiche.

APOGEE PXC Series (BACnet)alle Versionencisa_csaf_otUS
APOGEE PXC Series (P2 Ethernet)alle Versionencisa_csaf_otUS
TALON TC Series (BACnet)alle Versionencisa_csaf_otUS
Siemens APOGEE PXC Series (BACnet)≤ vers:all/*cisa_csaf_otUS
Siemens APOGEE PXC Series (P2 Ethernet)≤ vers:all/*cisa_csaf_otUS
Siemens TALON TC Series (BACnet)≤ vers:all/*cisa_csaf_otUS
Siemens APOGEE PXC Series (BACnet)0 → *enisa_euvdEU
Siemens APOGEE PXC Series (P2 Ethernet)0 → *enisa_euvdEU
Siemens TALON TC Series (BACnet)0 → *enisa_euvdEU
Siemens APOGEE PXC Series (BACnet)≤ vers:unknown/*ncsc_nlNL
Siemens APOGEE PXC Series (P2 Ethernet)≤ vers:unknown/*ncsc_nlNL
Siemens RUGGEDCOM RST2428P≤ vers:unknown/*ncsc_nlNL
Siemens SIMATIC PCS neo V4.1≤ vers:unknown/*ncsc_nlNL
Siemens SIMATIC PCS neo V5.0≤ vers:unknown/*ncsc_nlNL
Siemens SIMATIC Virtualization as a Service (SIVaaS)≤ vers:unknown/*ncsc_nlNL
Siemens SINAMICS G220 V6.4≤ vers:unknown/*ncsc_nlNL
Siemens SINAMICS S200 V6.4≤ vers:unknown/*ncsc_nlNL
Siemens SINAMICS S210 V6.4≤ vers:unknown/*ncsc_nlNL
Siemens TALON TC Series (BACnet)≤ vers:unknown/*ncsc_nlNL
Siemens User Management Component (UMC)≤ vers:unknown/*ncsc_nlNL

20 von 23 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2025-0274Kwetsbaarheden verholpen in Siemens productenNL2025-09-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Apogee, Industial Edge, RUGGEDCOM, SIMATIC, SIMOTION en SINAMICS.
SSA-916339SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices2025-09-09csaf · siemens_psirtDE
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
ICSA-25-254-05Siemens Apogee PXC and Talon TC Devices2025-09-09icsa · cisa_csaf_otUS
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2025-09-09geändert 2026-10-18

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan