CVE-2026-59693
Description
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions < V02.21.194.36-2715). The affected devices are vulnerable to a denial-of-service (DoS) vulnerability. An attacker can exploit this issue by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries. Recovery requires a device reset or reboot to restore normal functionality.
How to fix
- Siemens Desigo DXR2V01.21.233.16-7862 or later
- Siemens Desigo PXC3V01.21.233.16-7862 or later
- Siemens Desigo PXC4V02.21.194.36-2715 or later
- Siemens Desigo PXC5.E003V02.21.194.36-2715 or later
- Siemens Desigo PXC5.E24V02.21.194.36-2715 or later
- Siemens Desigo PXC7V02.21.194.36-2715 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens Desigo DXR2 | v < V01.21.233.16-7862 | V01.21.233.16-7862 |
| Siemens Desigo PXC3 | v < V01.21.233.16-7862 | V01.21.233.16-7862 |
| Siemens Desigo PXC4 | v < V02.21.194.36-2715 | V02.21.194.36-2715 |
| Siemens Desigo PXC5.E003 | v < V02.21.194.36-2715 | V02.21.194.36-2715 |
| Siemens Desigo PXC5.E24 | v < V02.21.194.36-2715 | V02.21.194.36-2715 |
| Siemens Desigo PXC7 | v < V02.21.194.36-2715 | V02.21.194.36-2715 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.