CVE-2026-102073: APOGEE MBC (PPC) (BACnet) 0 to before *; +9 more affected products

Affected technology

APOGEE MBC (PPC) (BACnet) · 0 to before *
Siemens

APOGEE MBC (PPC) (P2 Ethernet) · 0 to before *
Siemens

APOGEE MEC (PPC) (BACnet) · 0 to before *
Siemens

APOGEE MEC (PPC) (P2 Ethernet) · 0 to before *
Siemens

APOGEE PXC Compact (BACnet) · 0 to before V3.5.7
Siemens

APOGEE PXC Compact (P2 Ethernet) · 0 to before V2.8.21
Siemens

APOGEE PXC Modular (BACnet) · 0 to before V3.5.7
Siemens

APOGEE PXC Modular (P2 Ethernet) · 0 to before V2.8.21
Siemens

TALON TC Compact (BACnet) · 0 to before V3.5.7
Siemens

TALON TC Modular (BACnet) · 0 to before V3.5.7
Siemens

Description’s affected range: versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), AP

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker could read portions of device memory or to cause a denial-of-service condition. Vendor/CNA’s CVSS 4.0 assessment (base score 8.8/10) rates confidentiality impact as high; integrity impact as none; availability impact as low.