Integer overflow in Siemens Apogee Mbc (Ppc) (Bacnet)
CVE-2026-102073
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.
Published .
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Siemens Apogee Mbc (Ppc) (Bacnet)
- Siemens Apogee Mbc (Ppc) (P2 Ethernet)
- Siemens Apogee Mec (Ppc) (Bacnet)
- Siemens Apogee Mec (Ppc) (P2 Ethernet)
- Siemens Apogee Pxc Compact (Bacnet)
- Siemens Apogee Pxc Compact (P2 Ethernet)
- Siemens Apogee Pxc Modular (Bacnet)
- Siemens Apogee Pxc Modular (P2 Ethernet)
- Siemens Talon Tc Compact (Bacnet)
- Siemens Talon Tc Modular (Bacnet)
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-102073?
- CVE-2026-102073 is a high-severity vulnerability in Siemens Apogee Mbc (Ppc) (Bacnet), classified under Integer Underflow. CVSS score: 8.2/10. Published 2026-10-13.
- How severe is CVE-2026-102073?
- High severity. CVSS v3 base score is 8.2 out of 10.