A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versions

Summary

A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). The web server of affected devices lacks proper bounds checking when parsing the Host parameter in HTTP requests, which could lead to a buffer overflow. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the device with root privileges.

Timeline

1. Sep 14, 2021, 10:47 AM UTCCVE published
2. Apr 23, 2025, 1:27 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: total

3. Apr 23, 2025, 7:28 PM UTCRecord last updated

Affected versions

• Siemens APOGEE MBC (PPC) (P2 Ethernet)

  All versions >= V2.6.3

• Siemens APOGEE MEC (PPC) (P2 Ethernet)

  All versions >= V2.6.3

• Siemens APOGEE PXC Compact (BACnet)

  All versions < V3.5.3

• Siemens APOGEE PXC Compact (P2 Ethernet)

  All versions >= V2.8

• Siemens APOGEE PXC Modular (BACnet)

  All versions < V3.5.3

• Siemens APOGEE PXC Modular (P2 Ethernet)

  All versions >= V2.8

• Siemens TALON TC Compact (BACnet)

  All versions < V3.5.3

• Siemens TALON TC Modular (BACnet)

  All versions < V3.5.3

References 1