Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
6270 articles · 244408 vulns · 37/41 feeds (7d)
← Back to list
8.2
CVE-2026-102073PATCHED
siemens · apogee mbc (ppc) (bacnet)

CVE-2026-102073: A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver

Description

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.

Affected Products

VendorProductVersions
siemensapogee mbc (ppc) (bacnet)0, 0, 0, 0, 0, 0, 0, 0, 0, 0

References

  • https://cert-portal.siemens.com/productcert/html/ssa-333035.html

Related News (2 articles)

Tier C
VulDB7d ago
CVE-2026-102073 | Siemens APOGEE MBC information disclosure
→ No new info (linked only)
Tier B
CERT-FR8d ago
Multiples vulnérabilités dans les produits Siemens (13 octobre 2026)
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.2 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
CISA KEV❌ No
Actively exploited❌ No
Patch available
*V3.5.7V2.8.21
CWECWE-191
PublishedOct 13, 2026
Last enriched7d ago
Trending Score19
Source articles2
Independent2
Info Completeness5/14
Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

MEDIUMCVE-2026-110936EXP
CVE-2026-110936: A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads
Trending: 84
HIGHCVE-2026-85114
CVE-2026-85114: A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affect
Trending: 21
CRITICALCVE-2026-63353
CVE-2026-63353: Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the
Trending: 20
CRITICALCVE-2026-44415
CVE-2026-44415: Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an
Trending: 20
CRITICALCVE-2026-63354
CVE-2026-63354: Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before r
Trending: 20

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Oct 13, 2026
Discovered by ZDM
Oct 13, 2026
Patch Available
Oct 14, 2026