Lucene search

K
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500107.NASL
HistoryNov 08, 2019 - 12:00 a.m.

Siemens Apogee Improper Authentication

2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
11

0.01 Low

EPSS

Percentile

83.6%

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device.

File data ot_500107.nasl
VendorProductVersionCPE
siemensapogee_pxc_bacnet_automation_controller_firmware*cpe:2.3:o:siemens:apogee_pxc_bacnet_automation_controller_firmware:*:*:*:*:*:*:*:*
siemensapogee_pxc_bacnet_automation_controller-cpe:2.3:h:siemens:apogee_pxc_bacnet_automation_controller:-:*:*:*:*:*:*:*
siemenstalon_tc_bacnet_automation_controller_firmware*cpe:2.3:o:siemens:talon_tc_bacnet_automation_controller_firmware:*:*:*:*:*:*:*:*
siemenstalon_tc_bacnet_automation_controller-cpe:2.3:h:siemens:talon_tc_bacnet_automation_controller:-:*:*:*:*:*:*:*

0.01 Low

EPSS

Percentile

83.6%