Improper input validation in Siemens APOGEE MEC/MBC/PXC
Priority LOW 32CWE-20Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC00-U (All versions >= V2.3x and < V6.00.327), Desigo PXC001-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC100-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC12-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC128-U (All versions >= V2.3x and < V6.00.327), Desigo PXC200-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC50-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC64-U (All versions >= V2.3x and < V6.00.327), Desigo PXM20-E (All versions >= V2.3 < V6.0.327), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus Source Code (All versions), SIMOTICS CONNECT 400 (All versions < V0.3.0.330), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). By sending specially crafted DHCP packets to a device where the DHCP client is enabled, an attacker could change the IP address of the device to an invalid value.
Why it matters now
EPSS 0.00715 53rd percentileScored 2026-11-07
Fix Fixed APOGEE MEC/MBC/PXC (P2) (Siemens): V2.8.2APOGEE PXC Compact (BACnet) (Siemens): V3.5.3+18 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | APOGEE MEC/MBC/PXC (P2) | before V2.8.2 | V2.8.2 | Patch available | CNA |
| Siemens | APOGEE PXC Compact (BACnet) | before V3.5.3 | V3.5.3 | Patch available | CNA |
| Siemens | APOGEE PXC Compact (P2 Ethernet) | V2.8.2 to before V2.8.19 | V2.8.19 | Patch available | CNA |
| Siemens | APOGEE PXC Modular (BACnet) | before V3.5.3 | V3.5.3 | Patch available | CNA |
| Siemens | APOGEE PXC Modular (P2 Ethernet) | V2.8.2 to before V2.8.19 | V2.8.19 | Patch available | CNA |
| Siemens | Capital Embedded AR Classic 431-422 | all versions | — | No fix listed | CNA |
| Siemens | Capital Embedded AR Classic R20-11 | before V2303 | V2303 | Patch available | CNA |
| Siemens | Desigo PXC00-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC00-U | All versions >= V2.3x and < V6.00.327 | — | No fix listed | CNA |
| Siemens | Desigo PXC001-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC100-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC12-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC128-U | All versions >= V2.3x and < V6.00.327 | — | No fix listed | CNA |
| Siemens | Desigo PXC200-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC22-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC22.1-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC36.1-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC50-E.D | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Desigo PXC64-U | All versions >= V2.3x and < V6.00.327 | — | No fix listed | CNA |
| Siemens | Desigo PXM20-E | V2.3 to before V6.0.327 | V6.0.327 | Patch available | CNA |
| Siemens | Nucleus NET | all versions | — | No fix listed | CNA |
| Siemens | Nucleus ReadyStart V3 | before V2017.02.3 | V2017.02.3 | Patch available | CNA |
| Siemens | Nucleus Source Code | all versions | — | No fix listed | CNA |
| Siemens | SIMOTICS CONNECT 400 | before V0.3.0.330 | V0.3.0.330 | Patch available | CNA |
| Siemens | TALON TC Compact (BACnet) | before V3.5.3 | V3.5.3 | Patch available | CNA |
| Siemens | TALON TC Modular (BACnet) | before V3.5.3 | V3.5.3 | Patch available | CNA |
- APOGEE MEC/MBC/PXC (P2) VendorSiemens Affected before V2.8.2 Fixed in V2.8.2 Patch available CNA
- APOGEE PXC Compact (BACnet) VendorSiemens Affected before V3.5.3 Fixed in V3.5.3 Patch available CNA
- APOGEE PXC Compact (P2 Ethernet) VendorSiemens Affected V2.8.2 to before V2.8.19 Fixed in V2.8.19 Patch available CNA
- APOGEE PXC Modular (BACnet) VendorSiemens Affected before V3.5.3 Fixed in V3.5.3 Patch available CNA
- APOGEE PXC Modular (P2 Ethernet) VendorSiemens Affected V2.8.2 to before V2.8.19 Fixed in V2.8.19 Patch available CNA
- Capital Embedded AR Classic 431-422 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Capital Embedded AR Classic R20-11 VendorSiemens Affected before V2303 Fixed in V2303 Patch available CNA
- Desigo PXC00-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC00-U VendorSiemens Affected All versions >= V2.3x and < V6.00.327 Fixed in — No fix listed CNA
- Desigo PXC001-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC100-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC12-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC128-U VendorSiemens Affected All versions >= V2.3x and < V6.00.327 Fixed in — No fix listed CNA
- Desigo PXC200-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC22-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC22.1-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC36.1-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC50-E.D VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Desigo PXC64-U VendorSiemens Affected All versions >= V2.3x and < V6.00.327 Fixed in — No fix listed CNA
- Desigo PXM20-E VendorSiemens Affected V2.3 to before V6.0.327 Fixed in V6.0.327 Patch available CNA
- Nucleus NET VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Nucleus ReadyStart V3 VendorSiemens Affected before V2017.02.3 Fixed in V2017.02.3 Patch available CNA
- Nucleus Source Code VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMOTICS CONNECT 400 VendorSiemens Affected before V0.3.0.330 Fixed in V0.3.0.330 Patch available CNA
- TALON TC Compact (BACnet) VendorSiemens Affected before V3.5.3 Fixed in V3.5.3 Patch available CNA
- TALON TC Modular (BACnet) VendorSiemens Affected before V3.5.3 Fixed in V3.5.3 Patch available CNA
CPE configurations NVD · 46
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:siemens:capital_vstar:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:* | before 2017.02.2 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:nucleus_safetycert:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:nucleus_source_code:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:o:siemens:nucleus_rtos:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:o:siemens:apogee_modular_equiment_controller_firmware:*:*:*:*:*:*:*:* | before 2.8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:apogee_modular_equiment_controller:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:apogee_modular_building_controller_firmware:*:*:*:*:*:*:*:* | before 2.8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:apogee_modular_building_controller:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:a:siemens:capital_vstar:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:* Versions before 2017.02.2 Vulnerable ·Siemens
- cpe:2.3:a:siemens:nucleus_safetycert:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:nucleus_source_code:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:o:siemens:nucleus_rtos:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:o:siemens:apogee_modular_equiment_controller_firmware:*:*:*:*:*:*:*:* Versions before 2.8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:apogee_modular_equiment_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:apogee_modular_building_controller_firmware:*:*:*:*:*:*:*:* Versions before 2.8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:apogee_modular_building_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 36 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:apogee_pxc_firmware:*:*:*:*:*:*:*:* | up to 2.8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:apogee_pxc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc_firmware:*:*:*:*:*:*:*:* | 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxm20_firmware:*:*:*:*:*:*:*:* | 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxm20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simotics_connect_400_firmware:*:*:*:*:*:*:*:* | up to 0.3.0.95 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simotics_connect_400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:talon_tc_firmware:*:*:*:*:*:*:*:* | 3.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:talon_tc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc00-e.d_firmware:*:*:*:*:*:*:*:* | 2.3.0 to before 6.00.327 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc00-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc00-u_firmware:*:*:*:*:*:*:*:* | 2.3.0 to before 6.00.327 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc00-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc001-e.d_firmware:*:*:*:*:*:*:*:* | 2.3.0 to before 6.00.327 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc001-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc12-e.d_firmware:*:*:*:*:*:*:*:* | 2.3.0 to before 6.00.327 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc12-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc22-e.d_firmware:*:*:*:*:*:*:*:* | 2.3.0 to before 6.00.327 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc22-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc22.1-e.d_firmware:*:*:*:*:*:*:*:* | 2.3.0 to before 6.00.327 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc22.1-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc36.1-e.d_firmware:*:*:*:*:*:*:*:* | 2.3.0 to before 6.00.327 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc36.1-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigopxc50-e.d_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigopxc50-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigopxc64-u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigopxc64-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigopxc100-e.d_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigopxc100-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigopxc128-u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigopxc128-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigopxc200-e.d_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigopxc200-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigopxm20-e_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigopxm20-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:apogee_pxc_firmware:*:*:*:*:*:*:*:* Versions up to 2.8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:apogee_pxc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc_firmware:*:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxm20_firmware:*:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxm20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simotics_connect_400_firmware:*:*:*:*:*:*:*:* Versions up to 0.3.0.95 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simotics_connect_400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:talon_tc_firmware:*:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:talon_tc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc00-e.d_firmware:*:*:*:*:*:*:*:* Versions 2.3.0 to before 6.00.327 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc00-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc00-u_firmware:*:*:*:*:*:*:*:* Versions 2.3.0 to before 6.00.327 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc00-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc001-e.d_firmware:*:*:*:*:*:*:*:* Versions 2.3.0 to before 6.00.327 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc001-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc12-e.d_firmware:*:*:*:*:*:*:*:* Versions 2.3.0 to before 6.00.327 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc12-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc22-e.d_firmware:*:*:*:*:*:*:*:* Versions 2.3.0 to before 6.00.327 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc22-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc22.1-e.d_firmware:*:*:*:*:*:*:*:* Versions 2.3.0 to before 6.00.327 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc22.1-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc36.1-e.d_firmware:*:*:*:*:*:*:*:* Versions 2.3.0 to before 6.00.327 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc36.1-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigopxc50-e.d_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigopxc50-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigopxc64-u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigopxc64-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigopxc100-e.d_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigopxc100-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigopxc128-u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigopxc128-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigopxc200-e.d_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigopxc200-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigopxm20-e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigopxm20-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA APOGEE MEC/MBC/PXC (P2) (Siemens) Fixed in V2.8.2
- Fix · CNA APOGEE PXC Compact (BACnet) (Siemens) Fixed in V3.5.3
- Fix · CNA APOGEE PXC Compact (P2 Ethernet) (Siemens) Fixed in V2.8.19
- Fix · CNA APOGEE PXC Modular (BACnet) (Siemens) Fixed in V3.5.3
- Fix · CNA APOGEE PXC Modular (P2 Ethernet) (Siemens) Fixed in V2.8.19
- Fix · CNA Capital Embedded AR Classic R20-11 (Siemens) Fixed in V2303
- Fix · CNA Desigo PXC00-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXC001-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXC100-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXC12-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXC200-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXC22-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXC22.1-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXC36.1-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXC50-E.D (Siemens) Fixed in V6.0.327
- Fix · CNA Desigo PXM20-E (Siemens) Fixed in V6.0.327
- Fix · CNA Nucleus ReadyStart V3 (Siemens) Fixed in V2017.02.3
- Fix · CNA SIMOTICS CONNECT 400 (Siemens) Fixed in V0.3.0.330
- Fix · CNA TALON TC Compact (BACnet) (Siemens) Fixed in V3.5.3
- Fix · CNA TALON TC Modular (BACnet) (Siemens) Fixed in V3.5.3
Timeline
- 2026-10-02 Threatist record created from CVE-2019-13939
- 2026-10-03 Alias added: GHSA-jpvr-c9fc-2r4h
References
Advisory 3
More Siemens Apogee Modular Building Controller Firmware vulnerabilities
- TI-2021-11875 Out-of-bounds write in Siemens APOGEE MBC CVSS 3.1CRITICAL 9.8
- TI-2022-17998 Uncontrolled resource consumption in Siemens APOGEE MBC CVSS 4.0HIGH 8.7
- TI-2021-11873 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE… CVSS 3.1CRITICAL 9.8
- TI-2021-11879 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All… CVSS 3.1CRITICAL 9.1
- TI-2021-11878 Integer underflow in Siemens Capital Embedded AR Classic 431-422 CVSS 3.1CRITICAL 9.1
- TI-2021-11877 Out-of-bounds write in Siemens APOGEE MBC CVSS 3.1HIGH 8.8
Sources
- CVE-2019-13939 · CVE Program
- CVE-2019-13939 · NVD
- FIRST EPSS
- GHSA-jpvr-c9fc-2r4h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences