Lucene search
+L

461 matches found

CNVD
CNVD
added 2022/05/12 12:0 a.m.16 views

Unspecified Vulnerability in Siemens Desigo PXC and DXR Devices (CNVD-2022-37376)

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

5.3CVSS1AI score0.01041EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/11 12:0 a.m.21 views

Siemens Desigo PXC and DXR Devices Uncontrolled Resource Consumption Vulnerability

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

6.5CVSS1AI score0.00822EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/11 12:0 a.m.59 views

Siemens Desigo PXC and DXR Devices Remote Code Execution Vulnerability

The Desigo PXC4 building automation controller is designed for HVAC system control. It is a compact device with built-in IOs that can be expanded to meet your needs with additional TX-IO modules.The Desigo PXC5 is a freely programmable controller for BACnet system-level functions such as alarm...

9CVSS3.3AI score0.01911EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/11 12:0 a.m.22 views

Siemens Desigo DXR和PXC Controllers拒绝服务漏洞

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

7.5CVSS1.2AI score0.00894EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/11 12:0 a.m.77 views

Unspecified Vulnerability in Siemens Desigo PXC and DXR Devices (CNVD-2022-36376)

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

9.1CVSS0.8AI score0.00945EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/11 12:0 a.m.59 views

Unspecified Vulnerability in Siemens Desigo PXC and DXR Devices (CNVD-2022-37375)

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

7.5CVSS1AI score0.00869EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/11 12:0 a.m.63 views

Unspecified Vulnerability in Siemens Desigo PXC and DXR Devices (CNVD-2022-37374)

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

6.5CVSS1AI score0.0059EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/11 12:0 a.m.44 views

Siemens Desigo PXC and DXR Devices have unspecified vulnerabilities

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

6.5CVSS0.8AI score0.00463EPSS
SaveExploits0References1
NVD
NVD
added 2022/05/10 11:15 a.m.23 views

CVE-2021-41545

A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. When the controller receives a specific BACnet protocol packet, an exception cause...

7.5CVSS0.00894EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/10 11:15 a.m.19 views

Design/Logic Flaw

A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. When the controller receives a specific BACnet protocol packet, an exception cause...

5CVSS7.5AI score0.00894EPSS
SaveExploits0References1Affected Software4
CVE
CVE
added 2022/05/10 9:46 a.m.107 views

CVE-2021-41545

CVE-2021-41545 affects Siemens Desigo DXR2, PXC3, PXC4 and PXC5 controllers. When a device receives a specific BACnet packet, an exception can cause the BACnet communication function to enter an out-of-work state, potentially leading to a factory reset. Affected versions are: DXR2 all versions be...

7.5CVSS7.3AI score0.00894EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/10 9:46 a.m.23 views

CVE-2021-41545

A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. When the controller receives a specific BACnet protocol packet, an exception cause...

7.5AI score0.00894EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/05/10 12:0 a.m.10 views

多款Siemens产品安全漏洞

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

7.5CVSS7.3AI score0.00894EPSS
SaveExploits0References5
CNVD
CNVD
added 2022/03/09 12:0 a.m.84 views

Siemens Climatix POL909 (AWM and AWB) Cross-Site Scripting Vulnerability (CNVD-2022-17788)

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and implement and load customer web pages and features. Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to implement...

6.1CVSS1.1AI score0.00562EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.10 views

Siemens Climatix Pol909 日志信息泄露漏洞

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and implement and load customer web pages and features. Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to implement...

6.5CVSS5.5AI score0.00747EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.29 views

Climatix POL909 跨站脚本漏洞

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and implement and load customer web pages and features. Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to implement...

6.1CVSS5.3AI score0.00562EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.28 views

Siemens Nucleus RTOS-based APOGEE and TALON Products Improper Null Termination (CVE-2021-31884)

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

9.8CVSS7.8AI score0.01451EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.40 views

Siemens BACnet Field Panels Authentication Bypass Using an Alternate Path or Channel (CVE-2017-9946)

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. An attacker with network access to the integrated web server 80/tcp and 443/tcp could bypass the authentication and download sensitive information from the device. This plugi...

7.5CVSS7AI score0.24998EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.28 views

Siemens BACnet Field Panels Improper Limitation of a Pathname to a Restricted Directory (CVE-2017-9947)

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server 80/tcp and 443/tcp to obtain information on the structure o...

5.3CVSS6.5AI score0.07344EPSS
SaveExploits4References5
Prion
Prion
added 2021/11/09 12:15 p.m.30 views

Design/Logic Flaw

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

7.5CVSS9.2AI score0.01451EPSS
SaveExploits0References3Affected Software18
Rows per page
Query Builder