537 matches found
CVE-2026-59693
Summary of CVE-2026-59693 (Desigo) Affected products: Desigo DXR2; Desigo PXC3; Desigo PXC4; Desigo PXC5.E003; Desigo PXC5.E24; Desigo PXC7, with all versions below the cited build numbers: DXR2 < V01.21.233.16-7862; PXC3 < V01.21.233.16-7862; PXC4 < V02.21.194.36-2715; PXC5.E003 < V0...
CVE-2026-59693
A vulnerability has been identified in Desigo DXR2 All versions V01.21.233.16-7862, Desigo PXC3 All versions V01.21.233.16-7862, Desigo PXC4 All versions V02.21.194.36-2715, Desigo PXC5.E003 All versions V02.21.194.36-2715, Desigo PXC5.E24 All versions V02.21.194.36-2715, Desigo PXC7 All versions...
CVE-2026-59693
A vulnerability has been identified in Desigo DXR2 All versions V01.21.233.16-7862, Desigo PXC3 All versions V01.21.233.16-7862, Desigo PXC4 All versions V02.21.194.36-2715, Desigo PXC5.E003 All versions V02.21.194.36-2715, Desigo PXC5.E24 All versions V02.21.194.36-2715, Desigo PXC7 All versions...
PT-2026-70191
A vulnerability has been identified in Desigo DXR2 All versions V01.21.233.16-7862, Desigo PXC3 All versions V01.21.233.16-7862, Desigo PXC4 All versions V02.21.194.36-2715, Desigo PXC5.E003 All versions V02.21.194.36-2715, Desigo PXC5.E24 All versions V02.21.194.36-2715, Desigo PXC7 All versions...
CVE-2026-59693: Improper Check for Unusual or Exceptional Conditions
A vulnerability has been identified in Desigo DXR2 All versions V01.21.233.16-7862, Desigo PXC3 All versions V01.21.233.16-7862, Desigo PXC4 All versions V02.21.194.36-2715, Desigo PXC5.E003 All versions V02.21.194.36-2715, Desigo PXC5.E24 All versions V02.21.194.36-2715, Desigo PXC7 All versions...
Siemens Desigo DXR and PXC Controllers
SUMMARY A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality. Siemens has released new versions for...
building_automation_system_guardian
BAS Guardian - Free Building Automation System BAS Security...
CVE-2026-55732
Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...
CVE-2026-55732 Loytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod)
Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...
CVE-2026-55732
Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...
EUVD-2026-48597
Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...
CVE-2026-55732
Loytec CVE-2026-55732: An out-of-bounds read in BACnet packet parsing (bacdt_datetime_to_tod) affects LINX-A64 firmware and multiple Loytec products (LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, L-PAD) up to version 8.4.18. The vulnerability allows an unauthenticated remote attacker to...
CVE-2026-55732: Out-of-bounds Read
Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...
PT-2026-64304
Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.19 Loytec L-INX versions prior to 8.4.19 Loytec L-GATE versions prior to 8.4.19 Loytec L-ROC versions prior to 8.4.19 Loytec L-IOB versions prior to 8.4.19 Loytec L-DALI versions prior to 8.4.19 Loytec...
CVE-2026-40279
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, decodesigned32 in src/bacnet/bacint.c reconstructs a 32-bit signed integer from four APDU bytes using signed left shifts. When any of the four bytes has bit 7 set value ≥ 0x80, the left-shift...
CVE-2026-41502
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an off-by-one out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service decoder allows unauthenticated remote attackers to read one byte past an allocated buffer boundary by...
CVE-2026-38570
bacnetstack 1.3.1 contains an Out-of-bounds Read in bacnettagnumberdecode which allows attackers to cause a denial of service...
CVE-2026-38570
The bacnet_stack version 1.3.1 is vulnerable to an Out-of-bounds Read within the bacnet_tag_number_decode() function. An attacker can provide specially crafted input to trigger a read outside the allocated memory bounds, potentially leading to application crashes, unexpected behavior, or a denial...