A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE ME…
At a glance
Medium rather than High: exposure is scored at a default because we cannot see your systems or suppliers.
Briefing
- Organisations using the affected APOGEE products should assess their estate and consider applying the recommended updates or mitigations to reduce risk.
- Leaders should ensure IT teams are aware of the vulnerabilities and the available mitigation strategies from Siemens.
Questions to ask IT
- Are we affected by CVE-2026-102073, CVE-2026-102074 or 3 more, and which of our systems would be?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 10 Nov?
Next steps
- Confirm whether this affects systems or suppliers in your estate
Vulnerability facts
Full CVE detail CVE-2026-102073- 8.8 · HighExploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality; low on availability.CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Not listed
- Not linked from the CVE record
These facts are for CVE-2026-102073. This event covers 4 more CVEs, each with its own record.
- The vulnerabilities could allow an attacker to cause a denial of service and impact the availability of affected devices.
- Multiple CVE identifiers are associated with this event, including
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- A vulnerability has been identified in multiple APOGEE products, including MBC (PPC) and MEC (PPC) models, affecting their BACnet and P2 Ethernet components across all versions.
- Siemens has released updated versions for several affected products and advises users to upgrade to the latest versions to address the vulnerabilities.
- Specific mitigations are recommended for products where fixes are not yet available, according to Siemens.
Read the original reportCISA Cybersecurity Advisories(opens in a new tab)
- Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions
- An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4…
- A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327…
- A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All version…
Pulse
Last change 5d ago · Recheck overdue since 4 Nov 2026, 12:04 UK time
- Story3 Nov 2026, 12:04 UK time · 5d ago
Linked reporting from CISA Cybersecurity Advisories (official authority).
Read source (CISA Cybersecurity Advisories) - Story3 Nov 2026, 12:04 UK time · 5d ago
Linked reporting from CISA ICS Advisories (official authority).
Read source (CISA ICS Advisories)
2 entries so far. The timeline chart appears once this story has more history.
Sources
- CISA Cybersecurity AdvisoriesOfficial
Siemens APOGEE, TALON and Desigo PXC/PXM Products
- CISA ICS AdvisoriesOfficial
Siemens APOGEE, TALON and Desigo PXC/PXM Products
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE ME…
- ProbableSummary fact75% confidence
View CSAF Summary The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-102073
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-102074
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-102075
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-102076
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-89208