CVE-2017-9946

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-9946
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/101248 Broken Link Third Party Advisory VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf Vendor Advisory
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf Broken Link Vendor Advisory
http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/101248 Broken Link Third Party Advisory VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf Vendor Advisory
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf Broken Link Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:apogee_pxc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_pxc:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:talon_tc_modular_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:talon_tc_modular:-:*:*:*:*:*:*:*
History

21 Nov 2024, 03:37

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html - Exploit, Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/bid/101248 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/101248 - Broken Link, Third Party Advisory, VDB Entry
References () https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf - Vendor Advisory () https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf - Vendor Advisory
References () https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf - Broken Link, Vendor Advisory () https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf - Broken Link, Vendor Advisory

09 May 2023, 16:27

Type Values Removed Values Added
CPE cpe:2.3:o:siemens:apogee_pxc_bacnet_automation_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_pxc_bacnet_automation_controller:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:talon_tc_bacnet_automation_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:talon_tc_bacnet_automation_controller:-:*:*:*:*:*:*:*		 cpe:2.3:o:siemens:apogee_pxc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:talon_tc_compact_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:apogee_pxc_modular_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_pxc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:talon_tc_compact:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:talon_tc_modular:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:apogee_pxc_modular:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:talon_tc_modular_firmware:*:*:*:*:*:*:*:*
References (MISC) http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html - (MISC) http://packetstormsecurity.com/files/169544/Siemens-APOGEE-PXC-TALON-TC-Authentication-Bypass.html - Exploit, Third Party Advisory, VDB Entry
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-148078.pdf - Vendor Advisory
References (BID) http://www.securityfocus.com/bid/101248 - Third Party Advisory, VDB Entry (BID) http://www.securityfocus.com/bid/101248 - Broken Link, Third Party Advisory, VDB Entry
References (CONFIRM) https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf - Vendor Advisory (CONFIRM) https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-148078.pdf - Broken Link, Vendor Advisory
First Time Siemens talon Tc Modular Firmware
Siemens apogee Pxc Modular
Siemens talon Tc Modular
Siemens talon Tc Compact Firmware
Siemens apogee Pxc Modular Firmware
Siemens talon Tc Compact
Siemens apogee Pxc
Siemens apogee Pxc Firmware
Information

Published : 2017-10-23 08:29

Updated : 2025-04-20 01:37

NVD link : CVE-2017-9946

Mitre link : CVE-2017-9946

CVE.ORG link : CVE-2017-9946

JSON object : View

Products Affected

siemens

  • apogee_pxc_modular
  • talon_tc_modular
  • apogee_pxc_firmware
  • talon_tc_compact
  • talon_tc_compact_firmware
  • talon_tc_modular_firmware
  • apogee_pxc_modular_firmware
  • apogee_pxc
CWE
CWE-287

Improper Authentication