Advisories · Technology

Siemens APOGEE PXC Modular (BACnet).

Every CVE that names Siemens APOGEE PXC Modular (BACnet) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-102076 CVE record

CVSS 8.7 High

Stack-based buffer overflow in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-102075 CVE record

CVSS 8.7 High

Stack-based buffer overflow in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-102074 CVE record

CVSS 8.7 High

Stack-based buffer overflow in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-102073 CVE record

CVSS 8.8 High

Integer underflow in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2022-45937 CVE record

CVSS 8.8 High

Improper access control in Siemens APOGEE PXC Compact (BACnet) and others
- Siemens APOGEE PXC Compact (BACnet)
- Siemens APOGEE PXC Compact (P2 Ethernet)
- Broken access control
Not analysed yet 13 Dec 2022
CVE-2022-38371 CVE record

CVSS 8.7 High

Uncontrolled resource consumption in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- Denial of service
Not analysed yet 11 Oct 2022
CVE-2021-31888 CVE record

Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- CWE-170
Not analysed yet 9 Nov 2021
CVE-2021-31887 CVE record

Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- CWE-170
Not analysed yet 9 Nov 2021
CVE-2021-31886 CVE record

Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- CWE-170
Not analysed yet 9 Nov 2021
CVE-2021-31885 CVE record

Siemens APOGEE MBC (PPC) (BACnet): A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions)…
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- Memory corruption
Not analysed yet 9 Nov 2021
CVE-2021-31884 CVE record

Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others
- Siemens APOGEE MBC (PPC) (BACnet)
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- CWE-170
Not analysed yet 9 Nov 2021
CVE-2021-27391 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Siemens APOGEE MBC (PPC) (P2 Ethernet) and others
- Siemens APOGEE MBC (PPC) (P2 Ethernet)
- Siemens APOGEE MEC (PPC) (P2 Ethernet)
- Memory corruption
Not analysed yet 14 Sept 2021
CVE-2021-25677 CVE record

CVSS 5.3 Medium

Insufficiently random values in Siemens APOGEE PXC Compact (BACnet) and others
- Siemens APOGEE PXC Compact (BACnet)
- Siemens APOGEE PXC Compact (P2 Ethernet)
- Weak cryptography or TLS
Not analysed yet 22 Apr 2021
CVE-2020-27738 CVE record

CVSS 6.5 Medium

Siemens APOGEE PXC Compact (BACnet): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions <…
- Siemens APOGEE PXC Compact (BACnet)
- Siemens APOGEE PXC Compact (P2 Ethernet)
- Memory corruption
Not analysed yet 22 Apr 2021
CVE-2020-27737 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Siemens APOGEE PXC Compact (BACnet) and others
- Siemens APOGEE PXC Compact (BACnet)
- Siemens APOGEE PXC Compact (P2 Ethernet)
- Memory corruption
Not analysed yet 22 Apr 2021
CVE-2020-27736 CVE record

CVSS 6.5 Medium

Improper null termination in Siemens APOGEE PXC Compact (BACnet) and others
- Siemens APOGEE PXC Compact (BACnet)
- Siemens APOGEE PXC Compact (P2 Ethernet)
- CWE-170
Not analysed yet 22 Apr 2021
CVE-2020-27009 CVE record

CVSS 8.1 High

Siemens APOGEE PXC Compact (BACnet): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions <…
- Siemens APOGEE PXC Compact (BACnet)
- Siemens APOGEE PXC Compact (P2 Ethernet)
- CWE-823
Not analysed yet 22 Apr 2021
CVE-2020-15795 CVE record

CVSS 8.1 High

Out-of-bounds write in Siemens APOGEE PXC Compact (BACnet) and others
- Siemens APOGEE PXC Compact (BACnet)
- Siemens APOGEE PXC Compact (P2 Ethernet)
- Memory corruption
Not analysed yet 22 Apr 2021
CVE-2020-28388 CVE record

CVSS 6.5 Medium

Siemens APOGEE PXC Compact (BACnet): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions <…
- Siemens APOGEE PXC Compact (BACnet)
- Siemens APOGEE PXC Compact (P2 Ethernet)
- CWE-342
Not analysed yet 9 Feb 2021
CVE-2019-13939 CVE record

CVSS 7.1 High

Improper input validation in Siemens APOGEE MEC/MBC/PXC (P2) and others
- Siemens APOGEE MEC/MBC/PXC (P2)
- Siemens APOGEE PXC Compact (BACnet)
- CWE-20
Not analysed yet 16 Jan 2020