Description
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5
APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5affected
References
- http://www.securityfocus.com/bid/101248 ↗
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf ↗
- http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html ↗
- https://packetstorm.news/files/id/169544 ↗