CVE-2021-31885

mediumpriority · track · 30stack campaign · NUCLEUS:13EPSS 0.012 · 69 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.24% (69th) EPSS

CVSS 5 · medium

Is it mine?

148 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-26

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.4), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.19), Desigo PXC00-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC00-U (All versions >= V2.3 and < V6.30.016), Desigo PXC001-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC100-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC12-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC128-U (All versions >= V2.3 and < V6.30.016), Desigo PXC200-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC36.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC50-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC64-U (All versions >= V2.3 and < V6.30.016), Desigo PXM20-E (All versions >= V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.1), Nucleus Source Code (All versions), PLUSCONTROL 1st Gen (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). TFTP server application allows for reading the contents of the TFTP memory buffer via sending malformed TFTP commands. (FSMD-2021-0009)

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedNucleus ReadyStart V3siemens_psirt
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/
FixedNucleus ReadyStart V4siemens_psirt
Update to V4.1.1 or later version
https://support.sw.siemens.com/en-US/product/1336134128/
FixedNucleus Source Codesiemens_psirt
Contact customer support to receive patch and update information
FixedAPOGEE PXC Compact (BACnet)siemens_psirt
Update to V3.5.4 or later version
FixedAPOGEE PXC Compact (P2 Ethernet)siemens_psirt
Update to V2.8.19 or later version
FixedAPOGEE PXC Modular (BACnet)siemens_psirt
Update to V3.5.4 or later version
FixedAPOGEE PXC Modular (P2 Ethernet)siemens_psirt
Update to V2.8.19 or later version
FixedDesigo PXC00-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC00-Usiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC001-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC100-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC12-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC128-Usiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC200-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC22-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC22.1-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC36.1-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC50-E.Dsiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC64-Usiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXM20-Esiemens_psirt
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedTALON TC Compact (BACnet)siemens_psirt
Update to V3.5.4 or later version
FixedTALON TC Modular (BACnet)siemens_psirt
Update to V3.5.4 or later version
FixedNucleus ReadyStart V3cisa_csaf_ot
Update to V2017.02.4 or later version
https://support.sw.siemens.com/en-US/product/1009925838/
FixedNucleus ReadyStart V4cisa_csaf_ot
Update to V4.1.1 or later version
https://support.sw.siemens.com/en-US/product/1336134128/
FixedNucleus Source Codecisa_csaf_ot
Contact customer support to receive patch and update information
FixedAPOGEE PXC Compact (BACnet)cisa_csaf_ot
Update to V3.5.4 or later version
FixedAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot
Update to V2.8.19 or later version
FixedAPOGEE PXC Modular (BACnet)cisa_csaf_ot
Update to V3.5.4 or later version
FixedAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot
Update to V2.8.19 or later version
FixedDesigo PXC00-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC00-Ucisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC001-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC100-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC12-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC128-Ucisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC200-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC22-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC22.1-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC36.1-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC50-E.Dcisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXC64-Ucisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedDesigo PXM20-Ecisa_csaf_ot
Update to V6.30.016 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810577
FixedTALON TC Compact (BACnet)cisa_csaf_ot
Update to V3.5.4 or later version
FixedTALON TC Modular (BACnet)cisa_csaf_ot
Update to V3.5.4 or later version
MitigationNucleus NETsiemens_psirt
Contact customer support or your local Nucleus Sales team for mitigation advice
MitigationAPOGEE MBC (PPC) (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MEC (PPC) (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Compact (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Compact (P2 Ethernet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Modular (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Modular (P2 Ethernet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC00-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC00-Usiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC001-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC100-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC12-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC128-Usiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC200-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC22-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC22.1-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC36.1-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC50-E.Dsiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC64-Usiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXM20-Esiemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationTALON TC Compact (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationTALON TC Modular (BACnet)siemens_psirt
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationPLUSCONTROL 1st Gensiemens_psirt
PLUSCONTROL devices are typically located in a separate LAN segment of energy transmission solutions, where an attacker could use these vulnerabilities to disrupt SER messages or Trace functionalities. Therefore, review the status of the defense in depth recommendations that apply to your specific deployment and align as needed. Especially the measures on the network layer to prevent accessibility from other network segments.
MitigationNucleus NETcisa_csaf_ot
Contact customer support or your local Nucleus Sales team for mitigation advice
MitigationAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Compact (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Modular (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC00-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC00-Ucisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC001-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC100-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC12-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC128-Ucisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC200-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC22-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC22.1-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC36.1-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC50-E.Dcisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXC64-Ucisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationDesigo PXM20-Ecisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationTALON TC Compact (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationTALON TC Modular (BACnet)cisa_csaf_ot
CVE-2021-31881, CVE-2021-31882, CVE-2021-31883, CVE-2021-31884: Disable the DHCP client and use static IP address configuration instead (Note that the DHCP client is disabled by default on APOGEE/TALON and Desigo products.)
MitigationPLUSCONTROL 1st Gencisa_csaf_ot
PLUSCONTROL devices are typically located in a separate LAN segment of energy transmission solutions, where an attacker could use these vulnerabilities to disrupt SER messages or Trace functionalities. Therefore, review the status of the defense in depth recommendations that apply to your specific deployment and align as needed. Especially the measures on the network layer to prevent accessibility from other network segments.
No fix plannedNucleus NETsiemens_psirt
Currently no remediation is planned
No fix plannedAPOGEE MBC (PPC) (BACnet)siemens_psirt
Currently no fix is planned
No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt
Currently no fix is planned
No fix plannedAPOGEE MEC (PPC) (BACnet)siemens_psirt
Currently no fix is planned
No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt
Currently no fix is planned
No fix plannedPLUSCONTROL 1st Gensiemens_psirt
Currently no remediation is planned
No fix plannedNucleus NETcisa_csaf_ot
Currently no remediation is planned
No fix plannedAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot
Currently no fix is planned
No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot
Currently no fix is planned
No fix plannedAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot
Currently no fix is planned
No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot
Currently no fix is planned
No fix plannedPLUSCONTROL 1st Gencisa_csaf_ot
Currently no remediation is planned

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-805USCWE-805USCWE-805USCWE-805US

affected products (148)

Products and version ranges known to be affected.

APOGEE MBC (PPC) (BACnet)all versionscisa_csaf_otUS
APOGEE MBC (PPC) (P2 Ethernet)all versionscisa_csaf_otUS
APOGEE MEC (PPC) (BACnet)all versionscisa_csaf_otUS
APOGEE MEC (PPC) (P2 Ethernet)all versionscisa_csaf_otUS
APOGEE PXC Compact (BACnet)all versionscisa_csaf_otUS
APOGEE PXC Compact (P2 Ethernet)all versionscisa_csaf_otUS
APOGEE PXC Modular (BACnet)all versionscisa_csaf_otUS
APOGEE PXC Modular (P2 Ethernet)all versionscisa_csaf_otUS
Desigo PXC00-E.Dall versionscisa_csaf_otUS
Desigo PXC00-Uall versionscisa_csaf_otUS
Desigo PXC001-E.Dall versionscisa_csaf_otUS
Desigo PXC100-E.Dall versionscisa_csaf_otUS
Desigo PXC12-E.Dall versionscisa_csaf_otUS
Desigo PXC128-Uall versionscisa_csaf_otUS
Desigo PXC200-E.Dall versionscisa_csaf_otUS
Desigo PXC22-E.Dall versionscisa_csaf_otUS
Desigo PXC22.1-E.Dall versionscisa_csaf_otUS
Desigo PXC36.1-E.Dall versionscisa_csaf_otUS
Desigo PXC50-E.Dall versionscisa_csaf_otUS
Desigo PXC64-Uall versionscisa_csaf_otUS

showing 20 of 148

advisories (6)

Vendor and ecosystem advisories describing this.

SSA-044112SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS2021-11-09csaf · siemens_psirtDE
The TCP/IP stack and related services (FTP, TFTP) of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities, also known as "NUCLEUS:13" and as documented below. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not available.
SSA-114589SSA-114589: Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products2021-11-09csaf · siemens_psirtDE
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products listed below use affected versions of the Nucleus software and inherently contain these vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
SSA-845392SSA-845392: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices2022-01-11csaf · siemens_psirtDE
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. PLUSCONTROL 1st Gen devices are affected by some of the vulnerabilities as documented below. Siemens Energy recommends specific countermeasures for products where updates are not available.
ICSA-21-313-03Siemens Nucleus RTOS TCP/IP Stack2021-11-09icsa · cisa_csaf_otUS
The TCP/IP stack and related services (FTP, TFTP) of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities, also known as "NUCLEUS:13" and as documented below. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not available.
ICSA-21-315-07Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C)2021-11-09icsa · cisa_csaf_otUS
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products listed below use affected versions of the Nucleus software and inherently contain these vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-22-013-03Siemens Energy PLUSCONTROL2022-01-11icsa · cisa_csaf_otUS
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. PLUSCONTROL 1st Gen devices are affected by some of the vulnerabilities as documented below. Siemens Energy recommends specific countermeasures for products where updates are not available.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2021-11-09modified 2026-06-17

references (16)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan