CVE-2020-28388

The CVE-2020-28388 issue affects Siemens APOGEE PXC and TALON TC series, Nucleus NET/ReadyStart/Source Code, PLUSCONTROL, and related products. Root cause: Initial Sequence Numbers (ISNs) for TCP connections are derived from an insufficiently random source, making current and future ISNs predicta...

CVE-2020-28388

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus ReadyStart V3 All...

CVE-2020-28388

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus ReadyStart V3 All...

CVE-2019-13939

CVE-2019-13939 affects Siemens Mentor Nucleus Networking Module family (including APOGEE MEC/MBC/PXC, Desigo PXC, PXM, Nucleus NET/RTOS/ReadyStart, SIMOTICS/TALON, VSTAR) across numerous versions. The root cause is improper handling of DHCP packets: when the DHCP client is enabled, an attacker se...

Siemens Desigo PXC Detection (BACNET)

Detection of Siemens Desigo PXC Tries to detect Siemens Desigo PXC over the BACnet protocol. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Siemens Desigo PXC (Update A)

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Desigo PXC Vulnerability: Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-025-02 Siemens Desigo PXC that was published January...

Siemens Desigo PXC

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Desigo PXC Vulnerability: Improper Authentication AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following versions of Desigo PXC: Desigo Automation Controllers Compact...

CVE-2018-4834

A vulnerability has been identified in Desigo PXC00-E.D V4.10 All versions V4.10.111, Desigo PXC00-E.D V5.00 All versions V5.0.171, Desigo PXC00-E.D V5.10 All versions V5.10.69, Desigo PXC00-E.D V6.00 All versions V6.0.204, Desigo PXC00/64/128-U V4.10 All versions V4.10.111 only with web module,...

PT-2018-16559 · Siemens · Desigo Pxc22.1-E.D +10

Name of the Vulnerable Software and Affected Versions: Desigo PXC00-E.D versions V4.10 through V4.10.110 Desigo PXC00-E.D versions V5.00 through V5.0.170 Desigo PXC00-E.D versions V5.10 through V5.10.68 Desigo PXC00-E.D versions V6.00 through V6.0.203 Desigo PXC00/64/128-U versions V4.10 through...

Siemens Desigo PXC (Update C)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2017-9947

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server 80/tcp and 443/tcp to obtain information on the structure o...

CVE-2017-9947

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server 80/tcp and 443/tcp to obtain information on the structure o...

CVE-2017-9946

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. An attacker with network access to the integrated web server 80/tcp and 443/tcp could bypass the authentication and download sensitive information from the device...

CVE-2017-9946

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. An attacker with network access to the integrated web server 80/tcp and 443/tcp could bypass the authentication and download sensitive information from the device...

Directory traversal

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server 80/tcp and 443/tcp to obtain information on the structure o...

PT-2017-19307 · Siemens · Siemens Talon Tc Bacnet Automation Controllers +1

Name of the Vulnerable Software and Affected Versions: Siemens APOGEE PXC and TALON TC BACnet Automation Controllers versions prior to V3.5 Description: A vulnerability has been identified that allows an attacker with network access to the integrated web server to bypass authentication and downlo...

CVE-2017-9947

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server 80/tcp and 443/tcp to obtain information on the structure o...

CVE-2017-9946

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. An attacker with network access to the integrated web server 80/tcp and 443/tcp could bypass the authentication and download sensitive information from the device...

PT-2017-19308 · Siemens · Siemens Talon Tc Bacnet Automation Controllers +1

Name of the Vulnerable Software and Affected Versions: Siemens APOGEE PXC and TALON TC BACnet Automation Controllers versions prior to V3.5 Description: A directory traversal issue could allow a remote attacker with network access to the integrated web server to obtain information on the structur...

CVE-2017-9947

Summary (CVE-2017-9947) : Siemens APOGEE PXC and TALON TC BACnet Automation Controllers are affected by a directory traversal vulnerability in the integrated web server for all versions prior to V3.5, allowing a remote attacker with network access to enumerates the device’s filesystem structure. ...