CVE-2026-59693

What it is

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions < V02.21.194.36-2715). The affected devices are vulnerable to a denial-of-service (DoS) vulnerability. An attacker can exploit this issue by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries. Recovery requires a device reset or reboot to restore normal functionality.

At a glance

Exploitability

Can be exploited from the same network segment without logging in. Limited direct impact.

Exploit odds

0.2% chance of exploitation in the next 30 days (EPSS).

Fix

No patch or advisory is linked yet. Look at mitigations or restrict exposure.

Timeline

1. 2026-08-11 13:19 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-08-28 19:03 UTC Last updatedMost recent change to the record

Details

Published

2026-08-11 13:19 UTC

Last modified

2026-08-28 19:03 UTC

Exploit probability

0.2% · EPSS, next 30 days

Weakness

CWE-754

Record status

Awaiting Analysis

Attack profile CVSS 4.0 · 5.3

Attack vector

Adjacent network

Complexity

Low

Attack requirements

None

Privileges needed

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

Low