CVE-2025-40555 — Siemens / APOGEE PXC+TALON TC Series (BACnet)

Description (CNA)

A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions). Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted device, and potentially reduce the availability of BACnet network. A power cycle is required to restore the device's normal operation.

Affected (CNA)

Vendor / product	Versions
Siemens / APOGEE PXC+TALON TC Series (BACnet)	affected 0 before *

CWE

CWE-440

References

https://cert-portal.siemens.com/productcert/html/ssa-718393.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.