PT-2025-6199 · Unknown · Apogee Pxc Series+1

Johnathan Law · Published 2025-02-11 · Updated 2025-02-11 · CVE-2024-54090

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Series (BACnet) (All versions) APOGEE PXC Series (P2 Ethernet) (All versions) TALON TC Series (BACnet) (All versions)

Description: A vulnerability has been identified that contains an out-of-bounds read in the memory dump function. This could allow an attacker with Medium or higher privileges to cause the device to enter an insecure cold start state.

Recommendations: For APOGEE PXC Series (BACnet), consider disabling the memory dump function until a patch is available. For APOGEE PXC Series (P2 Ethernet), consider disabling the memory dump function until a patch is available. For TALON TC Series (BACnet), consider disabling the memory dump function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2024-54090

Affected Products

Apogee Pxc Series

Talon Tc Series

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-54090 · Security Note
• https://twitter.com/WolfgangSesin/status/1889279891654226238 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1889353129788858487 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-615116.html · Note
• https://t.me/cvedetector/17701 · Telegram Post
• https://twitter.com/CVEnew/status/1889265758087385500 · Twitter Post