Our takeSiemens released updates and mitigations for multiple DoS vulnerabilities in APOGEE, TALON, and Desigo PXC/PXM controllers. If you run any of these in your OT environment, apply the patches or mitigations on an emergency basis.Security Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:Apply the Siemens patches or mitigations in the advisory for APOGEE, TALON, and Desigo PXC/PXM controllers on your normal emergency change path; these are OT/ICS devices whose availability directly affects building operations.
What this means for you — Lean IT orgs:If you run Siemens APOGEE, TALON or Desigo building control systems, update them to the versions listed in the CISA advisory or apply the workarounds; an attacker could knock them offline.
What this means for you — MSP:Check every client for Siemens APOGEE, TALON or Desigo PXC/PXM deployments and schedule the vendor-recommended updates or mitigations; these are high-availability ICS targets.
What this means for you — Researcher:Review the full Siemens CSAF and CISA ICSA-26-295-08 for exact affected versions, CVSS scores and mitigations on APOGEE, TALON and Desigo products.