Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-27391

A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE PXC Compact (BACnet)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). The web server of affected devices lacks proper bounds checking when parsing the Host parameter in HTTP requests, which could lead to a buffer overflow. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the device with root privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens APOGEE MBC (PPC) (P2 Ethernet)

  • All versions >= V2.6.3affected

Siemens APOGEE MEC (PPC) (P2 Ethernet)

  • All versions >= V2.6.3affected

Siemens APOGEE PXC Compact (BACnet)

  • All versions < V3.5.3affected

Siemens APOGEE PXC Compact (P2 Ethernet)

  • All versions >= V2.8affected

Siemens APOGEE PXC Modular (BACnet)

  • All versions < V3.5.3affected

Siemens APOGEE PXC Modular (P2 Ethernet)

  • All versions >= V2.8affected

Siemens TALON TC Compact (BACnet)

  • All versions < V3.5.3affected

Siemens TALON TC Modular (BACnet)

  • All versions < V3.5.3affected

References