Siemens Desigo DXR and PXC Controllers Vulnerable to Denial-of-Service Attacks
A vulnerability in Siemens Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality.
Intelligence analysis by Llama
Siemens has released new versions for the affected products and recommends updating to the latest versions. The affected devices are vulnerable to a denial-of-service (DoS) vulnerability, which can be exploited by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries.
Imagine you're trying to talk to a device, but it's not responding because someone sent it a weird message. That's what's happening with these Siemens devices - they're not working because of a bad message. To fix it, you need to update the device to the latest version.
Analysis
Background
A vulnerability in Siemens Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. This vulnerability affects critical infrastructure sectors, including commercial facilities, critical manufacturing, energy, healthcare and public health, and transportation systems.
Affected Products
The following versions of Siemens Desigo DXR and PXC Controllers are affected:
- Desigo DXR2 vers:intdot/<01.21.233.16-7862 (CVE-2026-59693)
- Desigo PXC3 vers:intdot/<01.21.233.16-7862 (CVE-2026-59693)
- Desigo PXC4 vers:intdot/<02.21.194.36-2715 (CVE-2026-59693)
- Desigo PXC5.E003 vers:intdot/<02.21.194.36-2715 (CVE-2026-59693)
- Desigo PXC5.E24 vers:intdot/<02.21.194.36-2715 (CVE-2026-59693)
- Desigo PXC7 vers:intdot/<02.21.194.36-2715 (CVE-2026-59693)
Remediations
Siemens has released new versions for the affected products and recommends updating to the latest versions. The affected devices are vulnerable to a denial-of-service (DoS) vulnerability, which can be exploited by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries.
General Recommendations
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and following the recommendations in the product manuals.
Key points
- A vulnerability in Siemens Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets.
- The affected devices are vulnerable to a denial-of-service (DoS) vulnerability, which can be exploited by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries.
- Siemens has released new versions for the affected products and recommends updating to the latest versions.
If this vulnerability is addressed promptly, the affected devices can be updated to the latest versions, preventing potential attacks and ensuring the continued operation of critical infrastructure.
If the vulnerability is not addressed, the affected devices may remain vulnerable to denial-of-service attacks, potentially leading to disruptions in critical infrastructure services.
