CVE-2024-54090
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium (MED) or higher privileges to cause the device to enter an insecure cold start state.
- Score
- CVSS 4.0 6.0 Medium
- Status
- Deferred - productcert@siemens.com
- Published
- 2025-02-11
- Last modified
- 2025-02-12
- Weaknesses
- CWE-125
Affected products
- Apogee Pxc Series Bacnet (Siemens)
- Apogee Pxc Series P2 Ethernet (Siemens)
- Talon Tc Series Bacnet (Siemens)
References
- https://cert-portal.siemens.com/productcert/html/ssa-615116.html
