Siemens Desigo DXR/PXC BACnet DoS Vulnerability (CVE-2026-59693)

Vulnerability Overview Vulnerability ID: CVE-2026-59693 Vulnerability Type: Denial of Service (DoS) Description: A vulnerability was discovered in Desigo DXR and PXC controllers. An attacker can cause devices to stop responding to BACnet queries by sending malicious BACnet packets. Recovery requires a device reset or reboot to restore normal functionality. Affected Products Affected Products: - Desigo DXR2: All versions < V01.21.233.16-7862 - Desigo PXC3: All versions < V01.21.233.16-7862 - Desigo PXC4: All versions < V02.21.194.36-2715 - Desigo PXC5.E003: All versions < V02.21.194.36-2715 - Desigo PXC5.E24: All versions < V02.21.194.36-2715 - Desigo PXC7: All versions < V02.21.194.36-2715 Remediation Desigo DXR2: Update to V01.21.233.16-7862 or later Desigo PXC3: Update to V01.21.233.16-7862 or later Desigo PXC4: Update to V02.21.194.36-2715 or later Desigo PXC5.E003: Update to V02.21.194.36-2715 or later Desigo PXC5.E24: Update to V02.21.194.36-2715 or later Desigo PXC7: Update to V02.21.194.36-2715 or later Additional Information Publication Date: 2026-08-11 Last Update Date: 2026-08-11 Current Version: V1.0 CVSS v3.1 Base Score: 4.3 CVSS v4.0 Base Score: 5.3 CWE: CWE-754: Improper Check for Unusual or Exceptional Conditions Mitigation It is recommended to implement general security measures, such as protecting network access to devices and configuring the environment in accordance with industrial security guidelines. Vulnerability Details Vulnerability ID: CVE-2026-59693 CVSS v3.1 Base Score: 4.3 CVSS v4.0 Base Score: 5.3 CWE: CWE-754: Improper Check for Unusual or Exceptional Conditions Acknowledgments Thanks to Thomas EBI from Sauter for the coordinated disclosure. Further Information For more information on security vulnerabilities related to Siemens products and solutions, please contact Siemens ProductCERT. Historical Data Publication Date: 2026-08-11 Terms of Use The use of Siemens security advisories is subject to applicable terms and conditions.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens Desigo DXR/PXC BACnet DoS Vulnerability (CVE-2026-59693)