CVE-2024-54089CWE-326

A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All…

High · published February 11, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain a weak encryption mechanism based on a hard-coded key.

This could allow an attacker to guess or decrypt the password from the cyphertext.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00203 · 9.7th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2025-02-11T10:29Z
EPSS history
Timeline
  • 11 FEB 10:29Z
    A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All…
    cvelistv5