CVE-2025-40757CWE-200information-disclosure

CVE-2025-40757

Medium · published September 9, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices connected to the network allow unrestricted access to sensitive files, such as databases. This could allow an attacker to download encrypted .db file containing passwords.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-09-09T13:15Z
References (1)
https://cert-portal.siemens.com/productcert/html/ssa-916339.html · [email protected]
EPSS history
Timeline
  • 09 SEP 08:47Z
    A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All…
    cvelistv5