CVE-2026-59693
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Denial-of-service vulnerability in Desigo DXR2, PXC3, PXC4, PXC5.E003, PXC5.E24, and PXC7 devices in specific versions. Sending a malformed BACnet packet causes the device to stop responding to BACnet queries, requiring a reset or reboot to recover.
Risk Assessment
An attacker can disrupt building automation systems, causing device unavailability and potential operational issues.
Recommendation
Update devices to the versions specified in the description. Restrict network access to BACnet devices.
Original NVD description (English source)
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions < V02.21.194.36-2715). The affected devices are vulnerable to a denial-of-service (DoS) vulnerability. An attacker can exploit this issue by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries. Recovery requires a device reset or reboot to restore normal functionality.