CVE-2023-4346

KNX devices that use KNX Connection Authorization with Option 1 are affected. The vulnerability allows an attacker (network or physical access) to purge devices, set a BCU key, and lock the device, with users often unable to reset without the current password. The CVSSv3 base score is 7.5 (AV:N/A...

CVE-2023-4346

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this...

KNX Protocol

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity/known public exploitation Vendor: KNX Association Equipment: KNX devices using KNX Connection Authorization Vulnerability: Overly Restrictive Account Lockout Mechanism 2. RISK EVALUATION Successful exploitation...