Description
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server (80/tcp and 443/tcp) to obtain information on the structure of the file system of the affected devices.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5
APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5affected
References
- http://www.securityfocus.com/bid/101248 ↗
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf ↗
- http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html ↗
- https://packetstorm.news/files/id/169544 ↗