CVEs published February 9, 2021
145 CVEs were published on February 9, 2021: 4 critical, 18 high. 1 is now in CISA KEV.
- Published
- 145
- Critical
- 4
- High
- 18
- Medium
- 14
- Low
- 11
- Unrated
- 98
- Now in CISA KEV
- 1
- Fix available
- 54
Most affected products
- Google Chrome
- 33
- Foxit Studio Photo
- 22
- Siemens JT2Go · Siemens Teamcenter Visualization
- 12
- Dell PowerScale OneFS
- 7
- IBM Security Identity Governance and Intelligence
- 5
- xcb
- 4
- Omron CX-One · Omron CX-Protocol +2
- 3
- HPE Moonshot Provisioning Manager
- 2
- ABB AC500 V2 products with onboard Ethernet
- 1
- apexcharts
- 1
Critical 4
- CVE-2021-21502Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability.Dell PowerScale OneFS
- CVE-2021-21477SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticatSAP SE SAP Commerce
- CVE-2020-15798A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl.Siemens SIMATIC HMI Comfort Panels · Siemens SIMATIC HMI… +8
- CVE-2021-26918The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send an image when a user
High 18
- CVE-2020-26194Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 contain an Incorrect Permission Assignment for a Critical Resource vulnerability.Dell PowerScale OneFS
- CVE-2020-26193Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability.Dell PowerScale OneFS
- CVE-2020-26192Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability.Dell PowerScale OneFS
- CVE-2020-26191Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability.Dell PowerScale OneFS
- CVE-2021-21479In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity oSAP SE SCIMono · com.sap.scimono:scimono-server
- CVE-2020-27857This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17431This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17430This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17427This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17425This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17426This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17424This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17423This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17421This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17419This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17418This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2021-21148Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2020-24685AC500 V2 unauthenticated crafter packet vulnerabilityABB AC500 V2 products with onboard Ethernet
Medium, low and unrated 123
- CVE-2021-26951An issue was discovered in the calamine crate before 0.17.0 for Rust.calamine
- CVE-2021-26952An issue was discovered in the ms3d crate before 0.1.3 for Rust.ms3d
- CVE-2021-26954An issue was discovered in the qwutils crate before 0.3.1 for Rust.qwutils
- CVE-2021-26955An issue was discovered in the xcb crate through 2021-02-04 for Rust.xcb
- CVE-2021-26957An issue was discovered in the xcb crate through 2021-02-04 for Rust.xcb
- CVE-2021-26958An issue was discovered in the xcb crate through 2021-02-04 for Rust.xcb
- CVE-2021-26956An issue was discovered in the xcb crate through 2021-02-04 for Rust.xcb
- CVE-2021-26953An issue was discovered in the postscript crate before 0.14.0 for Rust.postscript
- CVE-2020-35125A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScmautic/core
- CVE-2020-26196Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue.Dell PowerScale OneFS
- CVE-2020-26195Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directoDell PowerScale OneFS
- CVE-2021-21478SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.SAP SE SAP NetWeaver AS ABAP
- CVE-2021-21476SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated attacker to redirect uSAP SE SAP UI5
- CVE-2021-21444SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which mSAP SE SAP Business Objects Business Intelligence Platform
- CVE-2021-21474SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML AssSAP SE SAP HANA Database
- CVE-2021-21475Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to exploit insufficient vaSAP SE SAP NetWeaver Master Data Management Server
- CVE-2021-21472SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set password during its iSAP SE SAP Software Provisioning Manager
- CVE-2020-22839Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers t
- CVE-2021-26937encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or
- CVE-2021-26551An issue was discovered in SmartFoxServer 2.17.0.
- CVE-2021-26550An issue was discovered in SmartFoxServer 2.17.0.
- CVE-2021-26549An XSS issue was discovered in SmartFoxServer 2.17.0.
- CVE-2020-18215Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashout_id parameters, whic
- CVE-2020-13117Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key paramete
- CVE-2020-28645Deleting users with certain names caused system files to be deleted.
- CVE-2021-22267Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0
- CVE-2020-28644The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints
- CVE-2021-3191Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0
- CVE-2019-17582A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempti
- CVE-2020-16144When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files
- CVE-2020-35572Adminer through 4.7.8 allows XSS via the history parameter to the default URI.vrana/adminer
- CVE-2020-35943A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload.
- CVE-2020-35942A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusi
- CVE-2021-22663Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files.Cscape
- CVE-2021-25141A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware.Aruba 5400R zl2 Switch Series; Aruba 2930F Switch Series; A…
- CVE-2021-25140A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20.HPE Moonshot Provisioning Manager
- CVE-2021-25139A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20.HPE Moonshot Provisioning Manager
- CVE-2021-26676gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation
- CVE-2021-26675A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.
- CVE-2020-27855This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-27856This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17436This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17434This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17435This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17433This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17432This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17428This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17429This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17422This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2020-17420This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922.Foxit Studio Photo
- CVE-2021-25666A vulnerability has been identified in SCALANCE W780 and W740 (IEEE 802.11n) family (All versions < V6.3).Siemens SCALANCE W780 and W740 (IEEE 802.11n) family
- CVE-2020-27007A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-27008A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-28392A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1).Siemens SIMARIS configuration
- CVE-2020-28394A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-26998A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-26999A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-27000A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-27001A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-27002A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-27003A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-27004A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-27005A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-27006A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2020-25238A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16).Siemens PCS neo · Siemens TIA Portal
- CVE-2020-25245A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1).Siemens DIGSI
- CVE-2020-10048A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2).Siemens SIMATIC PCS · Siemens SIMATIC WinCC
- CVE-2020-25237A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2).Siemens SINEC NMS · Siemens SINEMA Server
- CVE-2021-21147Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (Google Chrome
- CVE-2021-21145Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2021-21146Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2021-21144Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious eGoogle Chrome
- CVE-2021-21142Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape Google Chrome
- CVE-2021-21143Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious eGoogle Chrome
- CVE-2021-3394Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a
- CVE-2020-4996IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenIBM Security Identity Governance and Intelligence
- CVE-2020-4995IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a user to obtain sensitivIBM Security Identity Governance and Intelligence
- CVE-2020-4795IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a specially craftIBM Security Identity Governance and Intelligence
- CVE-2020-4791IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attIBM Security Identity Governance and Intelligence
- CVE-2020-4790IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improperly validating a supplIBM Security Identity Governance and Intelligence
- CVE-2020-27257Omron CX-OneOmron CX-One · Omron CX-Protocol +2
- CVE-2020-27261Omron CX-OneOmron CX-One · Omron CX-Protocol +2
- CVE-2020-27259Omron CX-OneOmron CX-One · Omron CX-Protocol +2
- CVE-2021-26921In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled.
- CVE-2021-21141Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extensionGoogle Chrome
- CVE-2021-21140Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access Google Chrome
- CVE-2021-21138Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a craGoogle Chrome
- CVE-2021-21139Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restricGoogle Chrome
- CVE-2021-21137Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive inGoogle Chrome
- CVE-2021-21135Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data vGoogle Chrome
- CVE-2021-21136Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin Google Chrome
- CVE-2021-21134Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafteGoogle Chrome
- CVE-2021-21132Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox eGoogle Chrome
- CVE-2021-21133Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download filGoogle Chrome
- CVE-2021-21131Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem resGoogle Chrome
- CVE-2021-21129Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem resGoogle Chrome
- CVE-2021-21130Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem resGoogle Chrome
- CVE-2021-21128Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a Google Chrome
- CVE-2021-21126Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via Google Chrome
- CVE-2021-21127Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security poGoogle Chrome
- CVE-2021-21125Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filGoogle Chrome
- CVE-2021-21123Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restriGoogle Chrome
- CVE-2021-21124Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially peGoogle Chrome
- CVE-2021-21122Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2021-21120Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2021-21121Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape Google Chrome
- CVE-2021-21119Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2021-21117Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege Google Chrome
- CVE-2021-21118Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memGoogle Chrome
- CVE-2020-16044Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2021-26719A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin
- CVE-2020-22841Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name
- CVE-2020-22840Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker
- CVE-2021-26925Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
- CVE-2021-23327Cross-site Scripting (XSS)apexcharts
- CVE-2020-13462Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA.
- CVE-2020-13461Username enumeration in present in Tufin SecureTrack.
- CVE-2020-13460Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA.
- CVE-2020-13407Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the
- CVE-2020-13409Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the
- CVE-2020-13408Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the
- CVE-2020-14343A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it proPyYAML
- CVE-2020-28388A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <Siemens APOGEE PXC Compact · Siemens APOGEE PXC Modular +6