Will Siemens Desigo DXR/PXC BACnet DoS vulnerability lead to documented exploitation by end of 2026?

CISA published an alert on a Siemens Desigo DXR and PXC controller vulnerability allowing denial-of-service attacks via malformed BACnet packets. Recovery requires device reboot, making it disruptive for building automation systems. Siemens released patches (CISA).

Resolution Criteria

Market resolves YES if credible sources document active exploitation of Desigo DXR/PXC BACnet DoS vulnerability causing confirmed service disruption in production building automation or HVAC systems by 2026-12-31. Sources: CISA advisories, vendor bulletins, incident response reports.