PT-2025-36680 · Unknown · Apogee Pxc Series+1

Published 2025-09-09 · Updated 2025-09-12 · CVE-2025-40757

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Series (BACnet) (affected versions not specified) APOGEE PXC Series (P2 Ethernet) (affected versions not specified) TALON TC Series (BACnet) (affected versions not specified)

Description: A vulnerability exists that allows unrestricted access to sensitive files, such as databases, on affected devices connected to the network. An attacker could download encrypted .db files containing passwords.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-40757

Affected Products

Apogee Pxc Series

Talon Tc Series

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-40757 · Security Note
• https://t.me/CVEtracker/32049 · Telegram Post
• https://cert-portal.siemens.com/productcert/html/ssa-916339.html · Note
• https://twitter.com/CVEnew/status/1965338914526310906 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1nesckx/siemens_apogee_pxc_and_talon_tc_vulnerability · Reddit Post