Threats tagged 'ghsa-m7fp-mx3h-5426'

A denial-of-service (DoS) vulnerability exists in multiple Siemens Desigo devices, including DXR2, PXC3, PXC4, PXC5.E003, PXC5.E24, and PXC7. The issue is triggered by sending a malformed BACnet packet, causing the affected device to stop responding to BACnet queries. Recovery requires a manual device reset or reboot. The vulnerability affects versions prior to V01.21.233.16-7862 for DXR2 and PXC3, and prior to V02.21.194.36-2715 for PXC4, PXC5.E003, PXC5.E24, and PXC7. The CVSS score is 4.3, indicating a medium severity impact focused on availability. No patch or official remediation information is provided in the available data.