Known vulnerabilities in APOGEE PXC Modular (BACnet)

Vendor: Siemens
Software: APOGEE PXC Modular (BACnet)
Software CPE: cpe:2.3:h:siemens:apogee_pxc_modular_bacnet:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 17
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting APOGEE PXC Modular (BACnet) APOGEE PXC Modular (BACnet) is affected by 17 known vulnerabilities: 5 high, 9 medium, 3 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68283 - Resource exhaustion
CVE-2022-38371		 CWE-400 Medium
No
No
 - 13.10.2022 SB2022101301
SB2022101305
SB2022101329
#VU58090 - Improper input validation
CVE-2021-31890		 CWE-20 High
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 3 more
#VU58089 - Integer overflow
CVE-2021-31889		 CWE-190 Medium
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 3 more
#VU58088 - Improper Null Termination
CVE-2021-31888		 CWE-170 Medium
No
No
 - 10.11.2021 SB2021111002
SB2021111003
#VU58087 - Improper Null Termination
CVE-2021-31887		 CWE-170 Medium
No
No
 - 10.11.2021 SB2021111002
SB2021111003
#VU58086 - Improper Null Termination
CVE-2021-31886		 CWE-170 High
No
No
 - 10.11.2021 SB2021111002
SB2021111003
#VU58085 - Out-of-bounds read
CVE-2021-31885		 CWE-125 Medium
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2022011803
#VU58084 - Improper Null Termination
CVE-2021-31884		 CWE-170 Medium
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
#VU58083 - Memory corruption
CVE-2021-31883		 CWE-119 Medium
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
#VU58082 - Memory corruption
CVE-2021-31882		 CWE-119 Low
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
#VU58081 - Out-of-bounds read
CVE-2021-31881		 CWE-125 Medium
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
#VU58080 - Improper input validation
CVE-2021-31346		 CWE-20 High
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 3 more
#VU58079 - Improper input validation
CVE-2021-31345		 CWE-20 High
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 2 more
#VU58078 - Type confusion
CVE-2021-31344		 CWE-843 Medium
No
No
 - 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 2 more
#VU56616 - Memory corruption
CVE-2021-27391		 CWE-119 High
No
No
 3.5.3 15.09.2021 SB2021091515
#VU8820 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-9947		 CWE-22 Low
Available
No
 3.5 13.10.2017 SB2017101305
SB2022061524
#VU8819 - Authentication Bypass Using an Alternate Path or Channel
CVE-2017-9946		 CWE-288 Low
No
No
 3.5 13.10.2017 SB2017101305
SB2022061524