Authentication Bypass in Siemens APOGEE PXC and TALON TC BACnet Controllers

CVE-2017-9946

What is CVE-2017-9946?

A security vulnerability exists in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers that allows an attacker with network access to the integrated web server to bypass authentication measures. By exploiting this flaw, unauthorized users can gain access to sensitive information stored on the device, which may lead to exposure of critical data and potentially compromise the overall system integrity. Affected versions include all prior to version 3.5. Organizations utilizing these devices should prioritize implementing appropriate security measures to mitigate potential risks.

References