Uncontrolled resource consumption in Siemens APOGEE MBC
Priority MEDIUM 47CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-400.
Summary
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), Desigo PXC00-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC00-U (All versions >= V2.3 < V6.30.37), Desigo PXC001-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC100-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC12-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC128-U (All versions >= V2.3 < V6.30.37), Desigo PXC200-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC22-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC50-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC64-U (All versions >= V2.3 < V6.30.37), Desigo PXM20-E (All versions >= V2.3 < V6.30.37), Nucleus NET for Nucleus PLUS V1 (All versions < V5.2a), Nucleus NET for Nucleus PLUS V2 (All versions < V5.4), Nucleus ReadyStart V3 V2012 (All versions < V2012.08.1), Nucleus ReadyStart V3 V2017 (All versions < V2017.02.4), Nucleus Source Code (All versions including affected FTP server), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01598 75th percentileScored 2026-11-07
Fix Fixed APOGEE PXC Compact (BACnet) (Siemens): V3.5.7APOGEE PXC Compact (P2 Ethernet) (Siemens): V2.8.21+21 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | APOGEE MBC (PPC) (BACnet) | All versions | — | No fix listed | CNA |
| Siemens | APOGEE MBC (PPC) (P2 Ethernet) | All versions | — | No fix listed | CNA |
| Siemens | APOGEE MEC (PPC) (BACnet) | All versions | — | No fix listed | CNA |
| Siemens | APOGEE MEC (PPC) (P2 Ethernet) | All versions | — | No fix listed | CNA |
| Siemens | APOGEE PXC Compact (BACnet) | before V3.5.7 | V3.5.7 | Patch available | CNA |
| Siemens | APOGEE PXC Compact (P2 Ethernet) | before V2.8.21 | V2.8.21 | Patch available | CNA |
| Siemens | APOGEE PXC Modular (BACnet) | before V3.5.7 | V3.5.7 | Patch available | CNA |
| Siemens | APOGEE PXC Modular (P2 Ethernet) | before V2.8.21 | V2.8.21 | Patch available | CNA |
| Siemens | Desigo PXC00-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC00-U | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC001-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC100-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC12-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC128-U | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC200-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC22-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC22.1-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC36.1-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC50-E.D | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXC64-U | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Desigo PXM20-E | V2.3 to before V6.30.37 | V6.30.37 | Patch available | CNA |
| Siemens | Nucleus NET for Nucleus PLUS V1 | before V5.2a | V5.2a | Patch available | CNA |
| Siemens | Nucleus NET for Nucleus PLUS V2 | before V5.4 | V5.4 | Patch available | CNA |
| Siemens | Nucleus ReadyStart V3 V2012 | before V2012.08.1 | V2012.08.1 | Patch available | CNA |
| Siemens | Nucleus ReadyStart V3 V2017 | before V2017.02.4 | V2017.02.4 | Patch available | CNA |
| Siemens | Nucleus Source Code | all versions | — | No fix listed | CNA |
| Siemens | TALON TC Compact (BACnet) | before V3.5.7 | V3.5.7 | Patch available | CNA |
| Siemens | TALON TC Modular (BACnet) | before V3.5.7 | V3.5.7 | Patch available | CNA |
- APOGEE MBC (PPC) (BACnet) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- APOGEE MBC (PPC) (P2 Ethernet) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- APOGEE MEC (PPC) (BACnet) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- APOGEE MEC (PPC) (P2 Ethernet) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- APOGEE PXC Compact (BACnet) VendorSiemens Affected before V3.5.7 Fixed in V3.5.7 Patch available CNA
- APOGEE PXC Compact (P2 Ethernet) VendorSiemens Affected before V2.8.21 Fixed in V2.8.21 Patch available CNA
- APOGEE PXC Modular (BACnet) VendorSiemens Affected before V3.5.7 Fixed in V3.5.7 Patch available CNA
- APOGEE PXC Modular (P2 Ethernet) VendorSiemens Affected before V2.8.21 Fixed in V2.8.21 Patch available CNA
- Desigo PXC00-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC00-U VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC001-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC100-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC12-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC128-U VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC200-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC22-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC22.1-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC36.1-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC50-E.D VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXC64-U VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Desigo PXM20-E VendorSiemens Affected V2.3 to before V6.30.37 Fixed in V6.30.37 Patch available CNA
- Nucleus NET for Nucleus PLUS V1 VendorSiemens Affected before V5.2a Fixed in V5.2a Patch available CNA
- Nucleus NET for Nucleus PLUS V2 VendorSiemens Affected before V5.4 Fixed in V5.4 Patch available CNA
- Nucleus ReadyStart V3 V2012 VendorSiemens Affected before V2012.08.1 Fixed in V2012.08.1 Patch available CNA
- Nucleus ReadyStart V3 V2017 VendorSiemens Affected before V2017.02.4 Fixed in V2017.02.4 Patch available CNA
- Nucleus Source Code VendorSiemens Affected all versions Fixed in — No fix listed CNA
- TALON TC Compact (BACnet) VendorSiemens Affected before V3.5.7 Fixed in V3.5.7 Patch available CNA
- TALON TC Modular (BACnet) VendorSiemens Affected before V3.5.7 Fixed in V3.5.7 Patch available CNA
CPE configurations NVD · 39
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:o:siemens:apogee_modular_building_controller_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:apogee_modular_building_controller:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:apogee_modular_equiment_controller_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:apogee_modular_equiment_controller:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:apogee_pxc_compact_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:apogee_pxc_compact:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
- cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:o:siemens:apogee_modular_building_controller_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:apogee_modular_building_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:apogee_modular_equiment_controller_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:apogee_modular_equiment_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:apogee_pxc_compact_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:apogee_pxc_compact:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
Show 29 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc00-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc00-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc00-u_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc00-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc001-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc001-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc12-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc12-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc22-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc22-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc22.1-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc22.1-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc36.1-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc36.1-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc50-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc50-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc64-u_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc64-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc100-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc100-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc128-u_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc128-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxc200-e.d_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxc200-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:desigo_pxm20-e_firmware:*:*:*:*:*:*:*:* | up to 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:desigo_pxm20-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc00-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc00-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc00-u_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc00-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc001-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc001-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc12-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc12-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc22-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc22-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc22.1-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc22.1-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc36.1-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc36.1-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc50-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc50-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc64-u_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc64-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc100-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc100-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc128-u_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc128-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxc200-e.d_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxc200-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:desigo_pxm20-e_firmware:*:*:*:*:*:*:*:* Versions up to 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:desigo_pxm20-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA APOGEE PXC Compact (BACnet) (Siemens) Fixed in V3.5.7
- Fix · CNA APOGEE PXC Compact (P2 Ethernet) (Siemens) Fixed in V2.8.21
- Fix · CNA APOGEE PXC Modular (BACnet) (Siemens) Fixed in V3.5.7
- Fix · CNA APOGEE PXC Modular (P2 Ethernet) (Siemens) Fixed in V2.8.21
- Fix · CNA Desigo PXC00-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC00-U (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC001-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC100-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC12-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC128-U (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC200-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC22-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC22.1-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC36.1-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC50-E.D (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXC64-U (Siemens) Fixed in V6.30.37
- Fix · CNA Desigo PXM20-E (Siemens) Fixed in V6.30.37
- Fix · CNA Nucleus NET for Nucleus PLUS V1 (Siemens) Fixed in V5.2a
- Fix · CNA Nucleus NET for Nucleus PLUS V2 (Siemens) Fixed in V5.4
- Fix · CNA Nucleus ReadyStart V3 V2012 (Siemens) Fixed in V2012.08.1
- Fix · CNA Nucleus ReadyStart V3 V2017 (Siemens) Fixed in V2017.02.4
- Fix · CNA TALON TC Compact (BACnet) (Siemens) Fixed in V3.5.7
- Fix · CNA TALON TC Modular (BACnet) (Siemens) Fixed in V3.5.7
Timeline
- 2026-10-02 Threatist record created from CVE-2022-38371
- 2026-10-03 Alias added: GHSA-59qg-qcpj-8hf9
References
More Siemens Apogee Modular Building Controller Firmware vulnerabilities
- TI-2021-11875 Out-of-bounds write in Siemens APOGEE MBC CVSS 3.1CRITICAL 9.8
- TI-2021-11873 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE… CVSS 3.1CRITICAL 9.8
- TI-2021-11879 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All… CVSS 3.1CRITICAL 9.1
- TI-2021-11878 Integer underflow in Siemens Capital Embedded AR Classic 431-422 CVSS 3.1CRITICAL 9.1
- TI-2021-11877 Out-of-bounds write in Siemens APOGEE MBC CVSS 3.1HIGH 8.8
- TI-2021-11876 Out-of-bounds write in Siemens APOGEE MBC CVSS 3.1HIGH 8.8
Sources
- CVE-2022-38371 · CVE Program
- CVE-2022-38371 · NVD
- FIRST EPSS
- GHSA-59qg-qcpj-8hf9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences