Denial-of-Service Vulnerability in Siemens Desigo Products

CVE-2026-59693

What is CVE-2026-59693?

A denial-of-service vulnerability has been identified in several Siemens Desigo product lines, allowing attackers to disrupt the normal operations of devices. By sending a malformed BACnet packet, an attacker can render the affected devices unresponsive to BACnet queries. Restoration of service necessitates either a manual device reset or reboot, which can lead to potential downtime and increased maintenance efforts.

References