project

Desigo CC

Siemens' building management platform, used from operator client workstations to supervise HVAC, fire safety, lighting and security systems, with user-defined graphics pages representing site layouts.

Known aliases

Desigo CC family
Desigo CC V6
Desigo CC V7

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Crafted Desigo CC graphics documents execute code on the operator client that opens them

CVE-2026-34223 lets a script embedded in a user-defined graphics document write arbitrary files on any Desigo CC V6 or V7 client. Siemens has no fix and points operators at who is allowed to open graphics.

Publishers:cisa.gov

Reality

Evidence72
Adoption: Insufficient
Hype gap−10
Incentives25
Confidence68