ICS-CERT has released an advisory on a Siemens BACnet Field Panels vulnerability. All versions prior to V3.5 of APOGEE PXC BACNet Automation Controllers and all versions prior to V3.5 of TALON TC BACnet Automation Controllers are affected. Successful exploitation of these vulnerabilities could allow unauthenticated attackers with access to the integrated webserver to download sensitive information. Siemens has provided firmware Version V3.5 for BACnet Field Panels Advanced modules, which fixes the vulnerabilities, and they recommend that users update to the new fixed version. ICS-CERT.
H2Oex: In Person 1 day event/exercise. Thurs Dec 5th. Washington DC. Join us!