Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:apogee_pxc_series_(p2_ethernet):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductApogee Pxc Series (P2 Ethernet) (daa9fcf5-1c78-5cd7-8aef-995a8c5ee736)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40757 vulnerable 2026-06-08 07:25:05.525605 Details available
MEDIUM (5.3)
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices connected to the network allow unrestricted access to sensitive files, such as databases. This could allow an attacker to download encrypted .db file containing passwords.
Published: 2025-09-09T08:47:59.102Z
Updated: 2025-09-09T19:35:46.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54090 vulnerable 2026-06-08 06:54:15.982470 Details available
MEDIUM (5.9)
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium (MED) or higher privileges to cause the device to enter an insecure cold start state.
Published: 2025-02-11T10:29:01.530Z
Updated: 2025-02-12T15:50:23.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54089 vulnerable 2026-06-08 06:54:15.981417 Details available
HIGH (7.5)
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain a weak encryption mechanism based on a hard-coded key. This could allow an attacker to guess or decrypt the password from the cyphertext.
Published: 2025-02-11T10:29:00.200Z
Updated: 2025-02-12T15:50:07.093Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.