CVE-2025-40757 Information disclosure in APOGEE PXC Series (BACnet)
Attackers can access sensitive files on Siemens APOGEE and TALON controllers to download encrypted database files containing passwords.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-40757?
CVE-2025-40757 is a medium-severity vulnerability in Siemens APOGEE PXC Series (BACnet), published on 9 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices connected to the network allow unrestricted access to sensitive files, such as databases. This could allow an attacker to download encrypted .db file containing passwords.
Weakness: CWE-200
Which versions are affected by CVE-2025-40757?
How do I fix CVE-2025-40757?
No fix has been published for CVE-2025-40757 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-40757 being exploited?
There is no known exploitation of CVE-2025-40757 in the wild and no public exploit code.
Sources
Also known as GHSA-hxmj-c688-7gw9.