First published: Tue Dec 13 2022(Updated: )
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). A low privilege authenticated attacker with network access to the integrated web server could download sensitive information from the device containing user account credentials.
Credit: productcert@siemens.com productcert@siemens.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Siemens Pxc00-e96.a Firmware | <3.5.5 | |
Siemens Pxc00-e96.a | ||
All of | ||
Siemens Pxc100-e96.a Firmware | <3.5.5 | |
Siemens Pxc100-e96.a | ||
All of | ||
Siemens Pxx-485.3 Firmware | <3.5.5 | |
Siemens Pxx-485.3 | ||
All of | ||
Siemens Pxc16.2-pe.a Firmware | <2.8.20 | |
Siemens Pxc16.2-pe.a | ||
All of | ||
Siemens Pxc24.2-pe.a Firmware | <2.8.20 | |
Siemens Pxc24.2-pe.a | ||
All of | ||
Siemens Pxc24.2-pef.a Firmware | <2.8.20 | |
Siemens Pxc24.2-pef.a | ||
All of | ||
Siemens Pxc24.2-per.a Firmware | <2.8.20 | |
Siemens Pxc24.2-per.a | ||
All of | ||
Siemens Pxc24.2-perf.a Firmware | <2.8.20 | |
Siemens Pxc24.2-perf.a | ||
All of | ||
siemens TALON TC Modular (bacnet) firmware | <3.5.5 | |
siemens TALON TC Modular (bacnet) | ||
Siemens Pxc00-e96.a Firmware | <3.5.5 | |
Siemens Pxc00-e96.a | ||
Siemens Pxc100-e96.a Firmware | <3.5.5 | |
Siemens Pxc100-e96.a | ||
Siemens Pxx-485.3 Firmware | <3.5.5 | |
Siemens Pxx-485.3 | ||
Siemens Pxc16.2-pe.a Firmware | <2.8.20 | |
Siemens Pxc16.2-pe.a | ||
Siemens Pxc24.2-pe.a Firmware | <2.8.20 | |
Siemens Pxc24.2-pe.a | ||
Siemens Pxc24.2-pef.a Firmware | <2.8.20 | |
Siemens Pxc24.2-pef.a | ||
Siemens Pxc24.2-per.a Firmware | <2.8.20 | |
Siemens Pxc24.2-per.a | ||
Siemens Pxc24.2-perf.a Firmware | <2.8.20 | |
Siemens Pxc24.2-perf.a | ||
siemens TALON TC Modular (bacnet) firmware | <3.5.5 | |
siemens TALON TC Modular (bacnet) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-45937 has been classified as a moderate severity vulnerability.
To fix CVE-2022-45937, upgrade to the latest versions of affected software as specified by Siemens.
CVE-2022-45937 affects all versions of certain Siemens firmware below specified versions including APOGEE PXC Compact, Modular, and TALON TC products.
Exploiting CVE-2022-45937 could allow unauthorized access and manipulation of the vulnerable systems.
Yes, Siemens has released patches to address CVE-2022-45937 which should be applied immediately.