Buffer Overflow Vulnerability in Multiple Siemens APOGEE MBC Products

2021-09-1500:00:00

China National Vulnerability Database

www.cnvd.org.cn

0.008 Low

EPSS

Percentile

81.5%

JSON

Siemens APOGEE MBC is a modular building controller from Siemens (Germany). A buffer overflow vulnerability exists in several Siemens APOGEE MBC products, which can be exploited by remote, unauthenticated attackers to execute arbitrary code on the device with root privileges.

CPENameOperatorVersion
siemens apogee mbc (ppc) (p2 ethernet) >= veq2.6.3
siemens apogee mec (ppc) (p2 ethernet) >= veq2.6.3
siemens apogee pxc compact (bacnet) < veq3.5.3
siemens apogee pxc compact (p2 ethernet) >= veq2.8
siemens apogee pxc modular (bacnet) < veq3.5.3
siemens apogee pxc modular (p2 ethernet) >= veq2.8
siemens talon tc compact (bacnet) < veq3.5.3
siemens talon tc modular (bacnet) < veq3.5.3

Name	Operator	Version
siemens apogee mbc (ppc) (p2 ethernet) >= v	eq	2.6.3
siemens apogee mec (ppc) (p2 ethernet) >= v	eq	2.6.3
siemens apogee pxc compact (bacnet) < v	eq	3.5.3
siemens apogee pxc compact (p2 ethernet) >= v	eq	2.8
siemens apogee pxc modular (bacnet) < v	eq	3.5.3
siemens apogee pxc modular (p2 ethernet) >= v	eq	2.8
siemens talon tc compact (bacnet) < v	eq	3.5.3
siemens talon tc modular (bacnet) < v	eq	3.5.3

0.008 Low

EPSS

Percentile

81.5%

JSON

Related for CNVD-2021-71447