CVE-2026-102073

highPriorität · verfolgen · 33EPSS 0.003 · 28. PerzentilDEFRUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.34% (28th) EPSS
CVSS 8.2 · high
Is it mine?
26 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cisa_csaf_ot · siemens_psirt · certfr

EPSS · bewertet 2026-10-27

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenAPOGEE PXC Compact (BACnet)siemens_psirt

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenAPOGEE PXC Compact (P2 Ethernet)siemens_psirt

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenAPOGEE PXC Modular (BACnet)siemens_psirt

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenAPOGEE PXC Modular (P2 Ethernet)siemens_psirt

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenTALON TC Compact (BACnet)siemens_psirt

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenTALON TC Modular (BACnet)siemens_psirt

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenAPOGEE PXC Compact (BACnet)cisa_csaf_ot

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenAPOGEE PXC Modular (BACnet)cisa_csaf_ot

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenTALON TC Compact (BACnet)cisa_csaf_ot

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • BehobenTALON TC Modular (BACnet)cisa_csaf_ot

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • MitigationAPOGEE MBC (PPC) (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (P2 Ethernet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (P2 Ethernet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Compact (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Modular (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Compact (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Modular (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • Kein Fix geplantAPOGEE MBC (PPC) (BACnet)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantAPOGEE MEC (PPC) (BACnet)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.7–8.8

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Lprimary · productcert@siemens.com DEAusnutzbarkeit 3.9 · Auswirkung 4.2
v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Lsecondary · CISA US
v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Lsecondary · Siemens ProductCERT DE
v4.08.8highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.06.7mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-191USCWE-191USCWE-191US
05

betroffene Produkte (26)

Betroffene Produkte und Versionsbereiche.

20 von 26 angezeigt
06

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • SSA-333035SSA-333035: Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products2026-10-13csaf · siemens_psirtDE

    The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.

  • ICSA-26-295-08Siemens APOGEE, TALON and Desigo PXC/PXM Products2026-10-13icsa · cisa_csaf_otUS

    The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.

  • CERTFR-2026-AVI-1298Multiples vulnérabilités dans les produits SiemensFrançais2026-10-13vendor · certfrFR
07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cisa_csaf_otsiemens_psirtcertfrNVDCVE.orgMITRE
veröffentlicht 2026-10-13geändert 2026-10-15
08

Referenzen (1) nvd

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan