DHCP Manipulation Vulnerability in Siemens APOGEE and Desigo Systems
CVE-2019-13939

7.1HIGH

Key Information:

Vendor: Siemens
Status: Apogee Mec/mbc/pxc (p2); Apogee Pxc Compact (bacnet); Apogee Pxc Compact (p2 Ethernet); Apogee Pxc Modular (bacnet)
Vendor: CVE Published:; 16 January 2020

What is CVE-2019-13939?

A vulnerability exists in Siemens' APOGEE and Desigo systems that allows an attacker to exploit inadequate DHCP packet handling. By sending specially crafted DHCP packets to devices with DHCP clients enabled, an unauthorized individual can change the IP addresses of the affected devices to invalid values. This could compromise both the availability and integrity of the impacted systems. Notably, the attack requires adjacent network access but does not necessitate any authentication or user interaction, making it particularly concerning for network security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch