Vulnerability · Published Aug 11, 2026 · Assigned by siemens
CVE-2026-59693
Medium 4.3
In plain English
A medium-severity security flaw in Desigo DXR2 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Official description
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions < V02.21.194.36-2715). The affected devices are vulnerable to a denial-of-service (DoS) vulnerability. An attacker can exploit this issue by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries. Recovery requires a device reset or reboot to restore normal functionality.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Desigo DXR2 | 0 – before V01.21.233.16-7862 |
| Siemens | Desigo PXC3 | 0 – before V01.21.233.16-7862 |
| Siemens | Desigo PXC4 | 0 – before V02.21.194.36-2715 |
| Siemens | Desigo PXC5.E003 | 0 – before V02.21.194.36-2715 |
| Siemens | Desigo PXC5.E24 | 0 – before V02.21.194.36-2715 |
| Siemens | Desigo PXC7 | 0 – before V02.21.194.36-2715 |
Weakness: CWE-754 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L