CVE-2022-38371

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2022
Source publication: Oct 11, 2022
Source updated: May 13, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), Desigo PXC00-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC00-U (All versions >= V2.3 < V6.30.37), Desigo PXC001-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC100-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC12-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC128-U (All versions >= V2.3 < V6.30.37), Desigo PXC200-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC22-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC50-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC64-U (All versions >= V2.3 < V6.30.37), Desigo PXM20-E (All versions >= V2.3 < V6.30.37), Nucleus NET for Nucleus PLUS V1 (All versions < V5.2a), Nucleus NET for Nucleus PLUS V2 (All versions < V5.4), Nucleus ReadyStart V3 V2012 (All versions < V2012.08.1), Nucleus ReadyStart V3 V2017 (All versions < V2017.02.4), Nucleus Source Code (All versions including affected FTP server), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

APOGEE MBC (PPC) (BACnet)

Vendor: Siemens
Product: APOGEE MBC (PPC) (BACnet)
Platforms: Unknown
Default status: unknown

APOGEE MBC (PPC) (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE MBC (PPC) (P2 Ethernet)

Vendor: Siemens
Product: APOGEE MBC (PPC) (P2 Ethernet)
Platforms: Unknown
Default status: unknown

APOGEE MBC (PPC) (P2 Ethernet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE MEC (PPC) (BACnet)

Vendor: Siemens
Product: APOGEE MEC (PPC) (BACnet)
Platforms: Unknown
Default status: unknown

APOGEE MEC (PPC) (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE MEC (PPC) (P2 Ethernet)

Vendor: Siemens
Product: APOGEE MEC (PPC) (P2 Ethernet)
Platforms: Unknown
Default status: unknown

APOGEE MEC (PPC) (P2 Ethernet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

APOGEE PXC Compact (BACnet)

Vendor: Siemens
Product: APOGEE PXC Compact (BACnet)
Platforms: Unknown
Default status: unknown

APOGEE PXC Compact (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.7	Unavailable	None listed

APOGEE PXC Compact (P2 Ethernet)

Vendor: Siemens
Product: APOGEE PXC Compact (P2 Ethernet)
Platforms: Unknown
Default status: unknown

APOGEE PXC Compact (P2 Ethernet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V2.8.21	Unavailable	None listed

APOGEE PXC Modular (BACnet)

Vendor: Siemens
Product: APOGEE PXC Modular (BACnet)
Platforms: Unknown
Default status: unknown

APOGEE PXC Modular (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.7	Unavailable	None listed

APOGEE PXC Modular (P2 Ethernet)

Vendor: Siemens
Product: APOGEE PXC Modular (P2 Ethernet)
Platforms: Unknown
Default status: unknown

APOGEE PXC Modular (P2 Ethernet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V2.8.21	Unavailable	None listed

Desigo PXC00-E.D

Vendor: Siemens
Product: Desigo PXC00-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC00-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC00-U

Vendor: Siemens
Product: Desigo PXC00-U
Platforms: Unknown
Default status: unknown

Desigo PXC00-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC001-E.D

Vendor: Siemens
Product: Desigo PXC001-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC001-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC100-E.D

Vendor: Siemens
Product: Desigo PXC100-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC100-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC12-E.D

Vendor: Siemens
Product: Desigo PXC12-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC12-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC128-U

Vendor: Siemens
Product: Desigo PXC128-U
Platforms: Unknown
Default status: unknown

Desigo PXC128-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC200-E.D

Vendor: Siemens
Product: Desigo PXC200-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC200-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC22-E.D

Vendor: Siemens
Product: Desigo PXC22-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC22-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC22.1-E.D

Vendor: Siemens
Product: Desigo PXC22.1-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC22.1-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC36.1-E.D

Vendor: Siemens
Product: Desigo PXC36.1-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC36.1-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC50-E.D

Vendor: Siemens
Product: Desigo PXC50-E.D
Platforms: Unknown
Default status: unknown

Desigo PXC50-E.D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXC64-U

Vendor: Siemens
Product: Desigo PXC64-U
Platforms: Unknown
Default status: unknown

Desigo PXC64-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Desigo PXM20-E

Vendor: Siemens
Product: Desigo PXM20-E
Platforms: Unknown
Default status: unknown

Desigo PXM20-E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V2.3	`affected`	custom	V6.30.37	Unavailable	None listed

Nucleus NET for Nucleus PLUS V1

Vendor: Siemens
Product: Nucleus NET for Nucleus PLUS V1
Platforms: Unknown
Default status: unknown

Nucleus NET for Nucleus PLUS V1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V5.2a	`affected`	Unavailable	Unavailable	Unavailable	None listed

Nucleus NET for Nucleus PLUS V2

Vendor: Siemens
Product: Nucleus NET for Nucleus PLUS V2
Platforms: Unknown
Default status: unknown

Nucleus NET for Nucleus PLUS V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V5.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

Nucleus ReadyStart V3 V2012

Vendor: Siemens
Product: Nucleus ReadyStart V3 V2012
Platforms: Unknown
Default status: unknown

Nucleus ReadyStart V3 V2012 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V2012.08.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Nucleus ReadyStart V3 V2017

Vendor: Siemens
Product: Nucleus ReadyStart V3 V2017
Platforms: Unknown
Default status: unknown

Nucleus ReadyStart V3 V2017 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V2017.02.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

Nucleus Source Code

Vendor: Siemens
Product: Nucleus Source Code
Platforms: Unknown
Default status: unknown

Nucleus Source Code · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	*	Unavailable	None listed

TALON TC Compact (BACnet)

Vendor: Siemens
Product: TALON TC Compact (BACnet)
Platforms: Unknown
Default status: unknown

TALON TC Compact (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.7	Unavailable	None listed

TALON TC Modular (BACnet)

Vendor: Siemens
Product: TALON TC Modular (BACnet)
Platforms: Unknown
Default status: unknown

TALON TC Modular (BACnet) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.7	Unavailable	None listed