ICSA-26-225-08

icsaUScisa_csaf_ot

Siemens Desigo DXR and PXC Controllers

view advisory published 2026-08-11

A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-59693US——
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • FixedDesigo DXR2

    Update to V01.21.233.16-7862 or later version Please contact your local Siemens office for additional support in obtaining the update.

  • FixedDesigo PXC3

    Update to V01.21.233.16-7862 or later version Please contact your local Siemens office for additional support in obtaining the update.

  • FixedDesigo PXC4

    Update to V02.21.194.36-2715 or later version Please contact your local Siemens office for additional support in obtaining the update.

  • FixedDesigo PXC5.E003

    Update to V02.21.194.36-2715 or later version Please contact your local Siemens office for additional support in obtaining the update.

  • FixedDesigo PXC5.E24

    Update to V02.21.194.36-2715 or later version Please contact your local Siemens office for additional support in obtaining the update.

  • FixedDesigo PXC7

    Update to V02.21.194.36-2715 or later version Please contact your local Siemens office for additional support in obtaining the update.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan