high8.8
CVE-2022-45937
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE P…
Impact
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). A low privilege authenticated attacker with network access to the integrated web server could download sensitive information from the device containing user account credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Pxc00-E96.A Firmware | before 3.5.5 |
| Siemens | Pxc100-E96.A Firmware | before 3.5.5 |
| Siemens | Pxx-485.3 Firmware | before 3.5.5 |
| Siemens | Pxc16.2-Pe.A Firmware | before 2.8.20 |
| Siemens | Pxc24.2-Pe.A Firmware | before 2.8.20 |
| Siemens | Pxc24.2-Pef.A Firmware | before 2.8.20 |
| Siemens | Pxc24.2-Per.A Firmware | before 2.8.20 |
| Siemens | Pxc24.2-Perf.A Firmware | before 2.8.20 |
| Siemens | Talon Tc Modular \(Bacnet\) Firmware | before 3.5.5 |