The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.
53 Affected Products
Desigo PXC00-U >= V2.3
Product Status: known_affected
Remediations
Desigo PXC001-E.D >= V2.3
Product Status: known_affected
Remediations
Desigo PXC100-E.D >= V2.3
Product Status: known_affected
Remediations
Desigo PXC12-E.D >= V2.3
Product Status: known_affected
Remediations
Desigo PXC128-U >= V2.3
Product Status: known_affected
Remediations
Desigo PXC200-E.D >= V2.3
Product Status: known_affected
Remediations
Desigo PXC22-E.D >= V2.3
Product Status: known_affected
Remediations
Desigo PXC22.1-E.D >= V2.3
Product Status: known_affected
Remediations
Desigo PXC36.1-E.D >= V2.3
Product Status: known_affected
Remediations
Desigo PXC50-E.D >= V2.3
Product Status: known_affected
Remediations
Desigo PXC64-U >= V2.3
Product Status: known_affected
Remediations
Desigo PXM20-E >= V2.3
Product Status: known_affected
Remediations
Desigo PXC00-E.D >= V2.3
Product Status: known_affected
Remediations
APOGEE MBC (PPC) (BACnet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE MBC (PPC) (P2 Ethernet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
TALON TC Compact (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
TALON TC Modular (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE MEC (PPC) (BACnet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE MEC (PPC) (P2 Ethernet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE PXC Compact (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE PXC Compact (P2 Ethernet) < V2.8.21
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V2.8.21 or later version
APOGEE PXC Modular (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE PXC Modular (P2 Ethernet) < V2.8.21
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V2.8.21 or later version
APOGEE MBC (PPC) (BACnet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE MBC (PPC) (P2 Ethernet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
TALON TC Compact (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
TALON TC Modular (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE MEC (PPC) (BACnet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE MEC (PPC) (P2 Ethernet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE PXC Compact (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE PXC Compact (P2 Ethernet) < V2.8.21
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V2.8.21 or later version
APOGEE PXC Modular (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE PXC Modular (P2 Ethernet) < V2.8.21
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V2.8.21 or later version
APOGEE MBC (PPC) (BACnet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE MBC (PPC) (P2 Ethernet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
TALON TC Compact (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
TALON TC Modular (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE MEC (PPC) (BACnet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE MEC (PPC) (P2 Ethernet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE PXC Compact (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE PXC Compact (P2 Ethernet) < V2.8.21
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V2.8.21 or later version
APOGEE PXC Modular (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE PXC Modular (P2 Ethernet) < V2.8.21
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V2.8.21 or later version
APOGEE MBC (PPC) (BACnet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE MBC (PPC) (P2 Ethernet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
TALON TC Compact (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
TALON TC Modular (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE MEC (PPC) (BACnet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE MEC (PPC) (P2 Ethernet)
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
No fix planned
Currently no fix is planned
APOGEE PXC Compact (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE PXC Compact (P2 Ethernet) < V2.8.21
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V2.8.21 or later version
APOGEE PXC Modular (BACnet) < V3.5.7
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V3.5.7 or later version
APOGEE PXC Modular (P2 Ethernet) < V2.8.21
Product Status: known_affected
Remediations
Mitigation
CVE-2026-89208 – Apply network segmentation and put the controllers behind properly configured gateways/firewalls.
Mitigation
Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)
Vendor fix
Update to V2.8.21 or later version
Additional Metrics
Relevant CWE: CWE-121 Stack-based Buffer Overflow