Siemens APOGEE, TALON and Desigo PXC/PXM Products

View CSAF Summary The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available. The following versions of Siemens APOGEE, TALON and Desigo PXC/PXM Products are affected: APOGEE MBC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076) APOGEE MBC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076) APOGEE MEC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076) APOGEE MEC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076) APOGEE PXC Compact (BACnet) vers:intdot/ =2.3 (CVE-2026-89208) Desigo PXC00-U vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC001-E.D vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC100-E.D vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC12-E.D vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC128-U vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC200-E.D vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC22-E.D vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC22.1-E.D vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC36.1-E.D vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC50-E.D vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXC64-U vers:intdot/>=2.3 (CVE-2026-89208) Desigo PXM20-E vers:intdot/>=2.3 (CVE-2026-89208) TALON TC Compact (BACnet) vers:intdot/ = V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC001-E.D >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC100-E.D >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC12-E.D >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC128-U >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC200-E.D >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC22-E.D >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC22.1-E.D >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC36.1-E.D >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Currently no fix is planned Desigo PXC50-E.D >= V2.3 Product Status: known_affected Remediations Mitigation CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls. No fix planned Cur