CVE-2017-9947
Medium
Description
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server (80/tcp and 443/tcp) to obtain information on the structure of the file system of the affected devices.
SeverityMedium
CVSS5.3
Exploit probability—
ProductSiemens Apogee Pxc Firmware
PublishedOct 23, 2017
First seenOct 23, 2017
Weakness typeCWE-538CWE-538
How to fix
Update
- siemens apogee_pxc_firmware3.5 or later
- siemens apogee_pxc_modular_firmware3.5 or later
- siemens talon_tc_compact_firmware3.5 or later
- siemens talon_tc_modular_firmware3.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens apogee_pxc_firmware | v < 3.5 | 3.5 |
| siemens apogee_pxc_modular_firmware | v < 3.5 | 3.5 |
| siemens talon_tc_compact_firmware | v < 3.5 | 3.5 |
| siemens talon_tc_modular_firmware | v < 3.5 | 3.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.