CVE-2017-9947

2017-10-2300:00:00

CWE-538

siemens

www.cve.org

5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%

JSON

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server (80/tcp and 443/tcp) to obtain information on the structure of the file system of the affected devices.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5",
    "versions": [
      {
        "version": "APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5",
        "status": "affected"
      }
    ]
  }
]