coldbraid

CVE-2023-4346 KNX Association KNX Protocol Connection…

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to…

CVSS
7.5 High
EPSS
1.4%
Percentile
72
Published
2023-08-29
Force
8 of 12

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-645

On CISA’s exploited list

KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

Added
2026-07-15
Federal patch deadline
2026-07-29
Ransomware use
not known