PT-2021-4188 · Unknown · Talon Tc Compact+5

Published 2021-09-14 · Updated 2021-09-28 · CVE-2021-27391

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions APOGEE MBC (PPC) (P2 Ethernet) versions V2.6.3 and later APOGEE MEC (PPC) (P2 Ethernet) versions V2.6.3 and later APOGEE PXC Compact (BACnet) versions prior to V3.5.3 APOGEE PXC Compact (P2 Ethernet) versions V2.8 and later APOGEE PXC Modular (BACnet) versions prior to V3.5.3 APOGEE PXC Modular (P2 Ethernet) versions V2.8 and later TALON TC Compact (BACnet) versions prior to V3.5.3 TALON TC Modular (BACnet) versions prior to V3.5.3

Description The web server of affected devices lacks proper bounds checking when parsing the Host parameter in HTTP requests, which could lead to a buffer overflow. An unauthenticated remote attacker could exploit this issue to execute arbitrary code on the device with root privileges.

Recommendations For APOGEE MBC (PPC) (P2 Ethernet) versions V2.6.3 and later, update to a version that includes the fix for this issue. For APOGEE MEC (PPC) (P2 Ethernet) versions V2.6.3 and later, update to a version that includes the fix for this issue. For APOGEE PXC Compact (BACnet) versions prior to V3.5.3, update to version V3.5.3 or later. For APOGEE PXC Compact (P2 Ethernet) versions V2.8 and later, update to a version that includes the fix for this issue. For APOGEE PXC Modular (BACnet) versions prior to V3.5.3, update to version V3.5.3 or later. For APOGEE PXC Modular (P2 Ethernet) versions V2.8 and later, update to a version that includes the fix for this issue. For TALON TC Compact (BACnet) versions prior to V3.5.3, update to version V3.5.3 or later. For TALON TC Modular (BACnet) versions prior to V3.5.3, update to version V3.5.3 or later. As a temporary workaround, consider restricting access to the web server to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

BDU:2021-04784

CVE-2021-27391

Affected Products

Apogee Mbc

Apogee Mec

Apogee Pxc Compact

Apogee Pxc Modular

Talon Tc Compact

Talon Tc Modular

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-27391 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-944498.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27391 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04784 · Security Note
• https://t.me/cibsecurity/28783 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021091515 · Note