CVE-2022-22810

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX formerly homeLYnk V2.6.2 and prior, fellerLYn...

CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-22806

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected Product: spaceLYnk V2.6.1 and prior, Wiser for KNX V2.6.1 and prior, fellerLYnk V2.6.1 and prior...

CVE-2021-37740

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

The vulnerability of the KNX Bus-System component of the microprogramming software for ABB Display 55, Display 63, Display 70, RoomTouch 4, BCU KNX devices allows a hacker to gain control over these devices by accessing the KNX bus.

The vulnerability of the KNX Bus-System microprogramming software components of ABB Display 55, Display 63, Display 70, RoomTouch 4, and BCU KNX lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to gain control over devices by accessing the...

CVE-2024-4008

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

CVE-2024-4008

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

CVE-2024-4009

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

CVE-2024-4009 Replay Attack in KNX Secure Devices

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

CVE-2024-4009 Replay Attack in KNX Secure Devices

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

CVE-2024-4009

This CVE (CVE-2024-4009) affects ABB KNX hardware and related components: ABB, Busch-Jaeger, FTS Display (v1.00), and BCU (v1.3.0.33). The vulnerability allows an attacker with Local access to capture and replay KNX telegrams on the local KNX Bus-System. Documented impact includes high confidenti...

CVE-2024-4008 FDSK Leak in KNX Secure Devices

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

CVE-2024-4008 FDSK Leak in KNX Secure Devices

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

CVE-2024-4008

CVE-2024-4008 concerns an FDSK Leak in ABB KNX Secure devices. Connected documents confirm affected components: ABB Display (version 1.00) and BCU (version 1.3.0.33), with the underlying issue allowing an attacker to gain control via access to the local KNX bus-system. Practical impact is control...

PT-2024-4065

Name of the Vulnerable Software and Affected Versions: ABB Display versions 1.00 BCU version 1.3.0.33 ABB Display 55 affected versions not specified ABB Display 63 affected versions not specified ABB Display 70 affected versions not specified RoomTouch 4 affected versions not specified Descriptio...

CVE-2024-4008: Exposure of Sensitive System Information to an Unauthorized Control Sphere

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

PT-2024-3986

Name of the Vulnerable Software and Affected Versions ABB Display versions 1.00 BCU version 1.3.0.33 ABB Display 55, Display 63, Display 70, RoomTouch 4 affected versions not specified Description The issue allows an attacker to capture and replay KNX telegrams to the local KNX Bus-System,...