CVE-2026-102073 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All…
Description
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| APOGEE MBC (PPC) (BACnet) | Versions not published | |
| APOGEE MBC (PPC) (P2 Ethernet) | Versions not published | |
| APOGEE MEC (PPC) (BACnet) | Versions not published | |
| APOGEE MEC (PPC) (P2 Ethernet) | Versions not published | |
| APOGEE PXC Compact (BACnet) 3.5 | earliest → < 3.5.7 | 3.5.7 |
| APOGEE PXC Compact (P2 Ethernet) 2.8 | earliest → < 2.8.21 | 2.8.21 |
| APOGEE PXC Modular (BACnet) 3.5 | earliest → < 3.5.7 | 3.5.7 |
| APOGEE PXC Modular (P2 Ethernet) 2.8 | earliest → < 2.8.21 | 2.8.21 |
| TALON TC Compact (BACnet) 3.5 | earliest → < 3.5.7 | 3.5.7 |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| TALON TC Modular (BACnet) 3.5 | earliest → < 3.5.7 | 3.5.7 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified