CVE-2026-59693: Siemens Desigo DXR2, логическа грешка

Описание

Оригинално описание

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions < V02.21.194.36-2715). The affected devices are vulnerable to a denial-of-service (DoS) vulnerability. An attacker can exploit this issue by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries. Recovery requires a device reset or reboot to restore normal functionality.

Засегнати продукти

• Siemens Desigo DXR2: преди V01.21.233.16-7862
• Siemens Desigo PXC3: преди V01.21.233.16-7862
• Siemens Desigo PXC4: преди V02.21.194.36-2715
• Siemens Desigo PXC5.E003: преди V02.21.194.36-2715
• Siemens Desigo PXC5.E24: преди V02.21.194.36-2715
• Siemens Desigo PXC7: преди V02.21.194.36-2715

Вид слабост

• CWE-754 Improper Check for Unusual or Exceptional Conditions

История

Други уязвимости в Siemens Desigo DXR2

• CVE-2022-24045
• CVE-2022-24044
• CVE-2022-24043
• CVE-2022-24042
• CVE-2022-24041

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-59693
• https://nvd.nist.gov/vuln/detail/CVE-2026-59693
• https://cert-portal.siemens.com/productcert/html/ssa-781903.html