Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-27391

A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). The web server of affected devices lacks proper bounds checking when parsing the Host parameter in HTTP requests, which could lead to a buffer overflow. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the device with root privileges.

Published

2021-09-14T11:15:23.913

Last Modified

2025-04-23T20:15:22.940

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens apogee_mbc_\(ppc\)_\(p2_ethernet\)_firmware ≤ 2.6.3 Yes
Hardware siemens apogee_mbc_\(ppc\)_\(p2_ethernet\) * No
Operating System siemens apogee_mec_\(ppc\)_\(p2_ethernet\)_firmware ≤ 2.6.3 Yes
Hardware siemens apogee_mec_\(ppc\)_\(p2_ethernet\) * No
Operating System siemens apogee_pxc_bacnet_automation_controller_firmware < 3.5.3 Yes
Hardware siemens apogee_pxc_bacnet_automation_controller - No
Operating System siemens apogee_pxc_compact_\(p2_ethernet\)_firmware ≤ 2.8 Yes
Hardware siemens apogee_pxc_compact_\(p2_ethernet\) * No
Operating System siemens apogee_pxc_modular_\(bacnet\)_firmware < 3.5.3 Yes
Hardware siemens apogee_pxc_modular_\(bacnet\) * No
Operating System siemens apogee_pxc_modular_\(p2_ethernet\)_firmware ≤ 2.8 Yes
Hardware siemens apogee_pxc_modular_\(p2_ethernet\) * No
Operating System siemens talon_tc_compact_\(bacnet\)_firmware < 3.5.3 Yes
Hardware siemens talon_tc_compact_\(bacnet\) * No
Operating System siemens talon_tc_modular_\(bacnet\)_firmware < 3.5.3 Yes
Hardware siemens talon_tc_modular_\(bacnet\) * No
References