CVE-2022-45937
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). A low privilege authenticated attacker with network access to the integrated web server could download sensitive information from the device containing user account credentials.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - productcert@siemens.com
- Published
- 2022-12-13
- Last modified
- 2025-04-21
- Weaknesses
- CWE-284
Affected products
- Apogee Pxc Compact Bacnet (Siemens)
- Apogee Pxc Compact P2 Ethernet (Siemens)
- Apogee Pxc Modular Bacnet (Siemens)
- Apogee Pxc Modular P2 Ethernet (Siemens)
- Pxc00-e96.a Firmware (Siemens)
- Pxc100-e96.a Firmware (Siemens)
- Pxc16.2-pe.a Firmware (Siemens)
- Pxc24.2-pe.a Firmware (Siemens)
- Pxc24.2-pef.a Firmware (Siemens)
- Pxc24.2-per.a Firmware (Siemens)
- Pxc24.2-perf.a Firmware (Siemens)
- Pxx-485.3 Firmware (Siemens)
- Talon Tc Compact Bacnet (Siemens)
- Talon Tc Modular (bacnet) Firmware (Siemens)
- Talon Tc Modular Bacnet (Siemens)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf
