CVE-2026-102075: APOGEE MBC (PPC) (BACnet) 0 to before *; +9 more affected products

Affected technology

APOGEE MBC (PPC) (BACnet) · 0 to before *
Siemens

APOGEE MBC (PPC) (P2 Ethernet) · 0 to before *
Siemens

APOGEE MEC (PPC) (BACnet) · 0 to before *
Siemens

APOGEE MEC (PPC) (P2 Ethernet) · 0 to before *
Siemens

APOGEE PXC Compact (BACnet) · 0 to before V3.5.7
Siemens

APOGEE PXC Compact (P2 Ethernet) · 0 to before V2.8.21
Siemens

APOGEE PXC Modular (BACnet) · 0 to before V3.5.7
Siemens

APOGEE PXC Modular (P2 Ethernet) · 0 to before V2.8.21
Siemens

TALON TC Compact (BACnet) · 0 to before V3.5.7
Siemens

TALON TC Modular (BACnet) · 0 to before V3.5.7
Siemens

Description’s affected range: versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), AP

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker could cause a denial of service. Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and integrity impact as none; availability impact as high.