CVE-2026-59693
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Summary
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions < V02.21.194.36-2715). The affected devices are vulnerable to a denial-of-service (DoS) vulnerability. An attacker can exploit this issue by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries. Recovery requires a device reset or reboot to restore normal functionality.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Siemens | Desigo DXR2 | 0 < V01.21.233.16-7862 | affected |
| Siemens | Desigo PXC3 | 0 < V01.21.233.16-7862 | affected |
| Siemens | Desigo PXC4 | 0 < V02.21.194.36-2715 | affected |
| Siemens | Desigo PXC5.E003 | 0 < V02.21.194.36-2715 | affected |
| Siemens | Desigo PXC5.E24 | 0 < V02.21.194.36-2715 | affected |
| Siemens | Desigo PXC7 | 0 < V02.21.194.36-2715 | affected |
Weaknesses
- CWE-754: CWE-754: Improper Check for Unusual or Exceptional Conditions
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.