Siemens Releases Security Updates for Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products
Four CVEs affect BACnet and P2 Ethernet implementations across building management and automation platforms; one additional CVE impacts Desigo PXC/PXM series
Key Takeaways
- Siemens has identified five CVEs across APOGEE, TALON and Desigo PXC/PXM product lines
- Four CVEs (CVE-2026-102073-76) affect BACnet and P2 Ethernet implementations, potentially causing denial of service
- CVE-2026-89208 impacts Desigo PXC/PXM models and involves improper input validation
- Siemens recommends updating to latest versions as primary mitigation
- Network segmentation and firewall/gateway placement recommended for products without available fixes
Related Security News
Researchers Disarm Vulnerable Updater in Abandoned Time4Popcorn App
Security researchers have remotely disabled a vulnerable updater component in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client. The flaw could have allowed attackers to execute malicious code with elevated privileges on millions of Windows computers. The intervention closed the security gap before active exploitation was reported.
HPE Patches Eight Maximum-Severity RCE and Auth Bypass Flaws in ArubaOS
Hewlett Packard Enterprise has released security updates to patch 72 vulnerabilities in the Aruba Operating System, including eight flaws rated maximum severity that allow unauthenticated remote code execution and authentication bypass. The updates address critical security gaps in ArubaOS switching and routing platforms.