ID
VAR-202505-1581
CVE
CVE-2025-40555
TITLE
Siemens APOGEE PXC+TALON TC Series Denial of Service Vulnerability
Trust: 0.6
DESCRIPTION
A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions). Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted device, and potentially reduce the availability of BACnet network. A power cycle is required to restore the device's normal operation. Attackers can exploit this vulnerability to cause a denial of service
Trust: 1.44
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | siemens | model: | apogee pxc+talon tc series | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-440 | Trust: 1.0 |
PATCH
| title: | Patch for Siemens APOGEE PXC+TALON TC Series Denial of Service Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/711176 | Trust: 0.6 |
EXTERNAL IDS
| db: | SIEMENS | id: | SSA-718393 | Trust: 1.6 |
| db: | NVD | id: | CVE-2025-40555 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2025-16631 | Trust: 0.6 |
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-718393.html | Trust: 1.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-16631 |
| db: | NVD | id: | CVE-2025-40555 |
LAST UPDATE DATE
2025-07-23T23:10:38.099000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-16631 | date: | 2025-07-22T00:00:00 |
| db: | NVD | id: | CVE-2025-40555 | date: | 2025-05-13T19:35:18.080 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-16631 | date: | 2025-07-22T00:00:00 |
| db: | NVD | id: | CVE-2025-40555 | date: | 2025-05-13T10:15:25.790 |