cve/2024/CVE-2024-54090.md
2025-09-29 16:08:36 +00:00

20 lines
1.1 KiB
Markdown

### [CVE-2024-54090](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54090)
![](https://img.shields.io/static/v1?label=Product&message=APOGEE%20PXC%20Series%20(BACnet)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=APOGEE%20PXC%20Series%20(P2%20Ethernet)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TALON%20TC%20Series%20(BACnet)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20*%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-125%3A%20Out-of-bounds%20Read&color=brighgreen)
### Description
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain an out-of-bounds read in the memory dump function.
This could allow an attacker with Medium (MED) or higher privileges to cause the device to enter an insecure cold start state.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/TrebledJ/TrebledJ