Siemens APOGEE PXC Expected Behavior Violation (CVE-2025-40555)

medium Tenable OT Security Plugin ID 504803

Synopsis

The remote OT asset is affected by a vulnerability.

Description

Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted device, and potentially reduce the availability of BACnet network. A power cycle is required to restore the device's normal operation.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

Plugin Details

Severity: Medium

ID: 504803

Version: 1.1

Type: remote

Family: Tenable.ot

Published: 11/18/2025

Updated: 11/18/2025

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Low

Score: 1.6

CVSS v3

Risk Factor: Medium

Base Score: 4.7

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Vulnerability Information

CPE: cpe:/o:siemens:apogee_pxc_compact_firmware, cpe:/o:siemens:apogee_pxc_modular_firmware

Required KB Items: Tenable.ot/Siemens

Exploit Ease: No known exploits are available

Patch Publication Date: 5/13/2025

Vulnerability Publication Date: 5/13/2025

Reference Information

CVE: CVE-2025-40555

CWE: 440

Detections

Analytics