cve/2024/CVE-2024-54089.md

### [CVE-2024-54089](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54089)
![](https://img.shields.io/static/v1?label=Product&message=APOGEE%20PXC%20Series%20(BACnet)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=APOGEE%20PXC%20Series%20(P2%20Ethernet)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TALON%20TC%20Series%20(BACnet)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20*%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-326%3A%20Inadequate%20Encryption%20Strength&color=brighgreen)

### Description

A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain a weak encryption mechanism based on a hard-coded key.
This could allow an attacker to guess or decrypt the password from the cyphertext.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/TrebledJ/TrebledJ