As cited
Copy frozen at (site build).
ot ics
Siemens APOGEE, TALON and Desigo PXC/PXM Products
Siemens APOGEE, TALON, and Desigo building automation controllers contain five vulnerabilities including out-of-bounds read, integer underflow, and stack-based buffer overflow flaws that allow unauthenticated remote attackers to cause denial of service or read device memory. Patches are available for TALON and some APOGEE variants; however, Desigo PXC and PXM products version 2.3 and later have no fix planned. Siemens recommends network segmentation, firewall protection, and disabling FTP/web services as interim mitigations.
Why it matters: Organizations running affected building automation systems in critical manufacturing, energy, healthcare, transportation, and financial sectors face potential facility disruptions or data leakage; apply available patches to TALON TC and APOGEE models, and deploy network controls immediately for unpatched Desigo systems.
- Source published
- First seen by Cybersecurity Tracker