CVE-2025-40757: Siemens APOGEE PXC Series (BACnet) · Information Exposure
Affects Siemens APOGEE PXC Series (BACnet)Source CVE Database V5
Not known to be exploited · CVSS 5.3 Medium.
Data as of 25 Oct 2026, 19:02 UTC
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 18% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 9 Sep 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Siemens APOGEE PXC Series (BACnet) | Affected
| Fixed in– |
AI-suggested
Given the lack of available patches, European organizations should immediately implement network segmentation to isolate APOGEE PXC and TALON TC devices from general IT networks and limit access to trusted management stations only. Deploy strict firewall rules to restrict inbound and outbound traffic to these devices, allowing only necessary protocols and IP addresses. Monitor network traffic for unusual access patterns to the devices, especially attempts to download .db files. Employ strong encryption and access controls on management interfaces where possible. Conduct regular audits of device configurations and credentials, and consider implementing multi-factor authentication for device management if supported. Organizations should also engage with Siemens for updates on patches or firmware upgrades and plan for timely deployment once available. Finally, incorporate these devices into OT security monitoring and incident response plans to detect and respond to potential exploitation attempts.
Description
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices connected to the network allow unrestricted access to sensitive files, such as databases. This could allow an attacker to download encrypted .db file containing passwords.