NewsSiemens ProductCERT

    SSA-180579 V1.1 (Last Update: 2023-08-08): Privilege Management Vulnerability and Multiple Nucleus RTOS Vulnerabilities in APOGEE/TALON Field Panels before V3.5.5/V2.8.20

    APOGEE PXC / TALON TC field panels (BACnet before V3.5.5 and P2 Ethernet before V2.8.20) contain multiple vulnerabilities: CVE-2022-45937: A privilege management vulnerability that could allow low privilege authenticated attackers to gain high privilege access. CVE-2020-28388: Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS (real-time operating system) used by the affected products. Several vulnerabilities in the DNS (domain name service) implementation of Nucleus RTOS. Siemens has released updates for the affected products and recommends to update to the latest versions.

    Linked advisories

    Affected vendors and products

    More on SSA-180579

    Other advisories

    Other news entries

    Source: https://cert-portal.siemens.com/productcert/html/ssa-180579.html

    ID