CNVD-2017-29972 — Vulnetix

CNVD-2017-29972 PUBLISHED

BACnet (Building Automation Control Network) 是建筑物自动化和控制网络的数据通信协议。 Siemens BACnet Field Panels存在目录遍历漏洞。允许具有网络访问集成Web服务器（端口80/TCP和443/TCP）的远程攻击者获取有关受影响设备的文件系统结构的信息。

Affected Products

Vendor	Product	Versions
	Siemens TALON TC BACnet Automation Controllers <V3.5
	Siemens APOGEE PXC BACnet Automation Controllers <V3.5

Timeline

Oct 13, 2017 CVE ID Reserved
Oct 13, 2017 CVE Published

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-285-05 url

Open in Interactive Console →