CVE-2026-102075A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet…
Updated under an hour ago ()
Does this affect you?
It affects Siemens APOGEE MBC (PPC) (BACnet) and 9 other products. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.57%, higher than 46% of scored CVEs.
Do this next
Free account, 1 product
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-121
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.57% (percentile 46)
- Assigned by
- siemens
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 13, 2026
- First seen by InfoSec Signals
- Oct 13, 2026
Affected products
Siemens APOGEE MBC (PPC) (BACnet) siemens:apogee_mbc_ppc_bacnet (from the name) | all versions | CNA record |
Siemens APOGEE MBC (PPC) (P2 Ethernet) siemens:apogee_mbc_ppc_p2_ethernet (from the name) | all versions | CNA record |
Siemens APOGEE MEC (PPC) (BACnet) siemens:apogee_mec_ppc_bacnet (from the name) | all versions | CNA record |
Siemens APOGEE MEC (PPC) (P2 Ethernet) siemens:apogee_mec_ppc_p2_ethernet (from the name) | all versions | CNA record |
Siemens APOGEE PXC Compact (BACnet) siemens:apogee_pxc_compact_bacnet (from the name) | before V3.5.7 | CNA record |
Siemens APOGEE PXC Compact (P2 Ethernet) siemens:apogee_pxc_compact_p2_ethernet (from the name) | before V2.8.21 | CNA record |
Siemens APOGEE PXC Modular (BACnet) siemens:apogee_pxc_modular_bacnet (from the name) | before V3.5.7 | CNA record |
Siemens APOGEE PXC Modular (P2 Ethernet) siemens:apogee_pxc_modular_p2_ethernet (from the name) | before V2.8.21 | CNA record |
Siemens TALON TC Compact (BACnet) siemens:talon_tc_compact_bacnet (from the name) | before V3.5.7 | CNA record |
Siemens TALON TC Modular (BACnet) siemens:talon_tc_modular_bacnet (from the name) | before V3.5.7 | CNA record |
References
- https://cert-portal.siemens.com/productcert/html/ssa-333035.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.