A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3),
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V3.5.3, V2.8.19, V2303, V6.0.327, V2017.02.3
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC00-U (All versions >= V2.3x and < V6.00.327), Desigo PXC001-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC100-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC12-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC128-U (All versions >= V2.3x and < V6.00.327), Desigo PXC200-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC50-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC64-U (All versions >= V2.3x and < V6.00.327), Desigo PXM20-E (All versions >= V2.3 < V6.0.327), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus Source Code (All versions), SIMOTICS CONNECT 400 (All versions < V0.3.0.330), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). By sending specially crafted DHCP packets to a device where the DHCP client is enabled, an attacker could change the IP address of the device to an invalid value.
Timeline
- CVE published
- Record last updated
Affected versions
- Siemens APOGEE MEC/MBC/PXC (P2)
All versions < V2.8.2
- Siemens APOGEE PXC Compact (BACnet)
fixed in V3.5.3
- Siemens APOGEE PXC Compact (P2 Ethernet)
From V2.8.2 · fixed in V2.8.19
- Siemens APOGEE PXC Modular (BACnet)
fixed in V3.5.3
- Siemens APOGEE PXC Modular (P2 Ethernet)
From V2.8.2 · fixed in V2.8.19
- Siemens Capital Embedded AR Classic 431-422
All versions
- Siemens Capital Embedded AR Classic R20-11
fixed in V2303
- Siemens Desigo PXC00-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC00-U
Version range not reported
- Siemens Desigo PXC001-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC100-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC12-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC128-U
Version range not reported
- Siemens Desigo PXC200-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC22-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC22.1-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC36.1-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC50-E.D
From V2.3 · fixed in V6.0.327
- Siemens Desigo PXC64-U
Version range not reported
- Siemens Desigo PXM20-E
From V2.3 · fixed in V6.0.327
- Siemens Nucleus NET
All versions
- Siemens Nucleus ReadyStart V3
fixed in V2017.02.3
- Siemens Nucleus Source Code
All versions
- Siemens SIMOTICS CONNECT 400
All versions < V0.3.0.330
- Siemens TALON TC Compact (BACnet)
fixed in V3.5.3
- Siemens TALON TC Modular (BACnet)
fixed in V3.5.3