Vulnerability · Published Sep 9, 2025 · Assigned by siemens
CVE-2025-40757
Medium 5.3
In plain English
A medium-severity information exposure in APOGEE PXC Series (BACnet) from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Official description
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices connected to the network allow unrestricted access to sensitive files, such as databases. This could allow an attacker to download encrypted .db file containing passwords.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | APOGEE PXC Series (BACnet) | 0 – before * |
| Siemens | APOGEE PXC Series (P2 Ethernet) | 0 – before * |
| Siemens | TALON TC Series (BACnet) | 0 – before * |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N