Description
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions < V02.21.194.36-2715). The affected devices are vulnerable to a denial-of-service (DoS) vulnerability. An attacker can exploit this issue by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries. Recovery requires a device reset or reboot to restore normal functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Desigo DXR2 | < V01.21.233.16-7862 | V01.21.233.16-7862 |
| Siemens | Desigo PXC3 | < V01.21.233.16-7862 | V01.21.233.16-7862 |
| Siemens | Desigo PXC4 | < V02.21.194.36-2715 | V02.21.194.36-2715 |
| Siemens | Desigo PXC5.E003 | < V02.21.194.36-2715 | V02.21.194.36-2715 |
| Siemens | Desigo PXC5.E24 | < V02.21.194.36-2715 | V02.21.194.36-2715 |
| Siemens | Desigo PXC7 | < V02.21.194.36-2715 | V02.21.194.36-2715 |
Advisories 3
- ICSA-26-225-08 Siemens Desigo DXR and PXC Controllers CISA ICS & IT advisories · Aug 13, 2026
- NCSC-2026-0282 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 11, 2026
- SSA-781903 SSA-781903: Denial of Service Vulnerability in Desigo DXR and PXC Controllers Siemens ProductCERT · Aug 11, 2026