CVE-2017-9946

Name of the Vulnerable Software and Affected Versions Siemens APOGEE PXC and TALON TC BACnet Automation Controllers versions prior to V3.5

Description A vulnerability has been identified that allows an attacker with network access to the integrated web server to bypass authentication and download sensitive information from the device. The attacker can access the web server through ports 80/tcp and 443/tcp.

Recommendations For versions prior to V3.5, update to version V3.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the integrated web server on ports 80/tcp and 443/tcp to minimize the risk of exploitation.