← CVE Intelligence

CVE-2022-45937

Siemens / APOGEE PXC Compact (BACnet) PUBLISHED

Description (CNA)

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). A low privilege authenticated attacker with network access to the integrated web server could download sensitive information from the device containing user account credentials.

Affected (CNA)

Vendor / productVersions
Siemens / APOGEE PXC Compact (BACnet)affected All versions < V3.5.5
Siemens / APOGEE PXC Compact (P2 Ethernet)affected All versions < V2.8.20
Siemens / APOGEE PXC Modular (BACnet)affected All versions < V3.5.5
Siemens / APOGEE PXC Modular (P2 Ethernet)affected All versions < V2.8.20
Siemens / TALON TC Compact (BACnet)affected All versions < V3.5.5
Siemens / TALON TC Modular (BACnet)affected All versions < V3.5.5

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.