CVE-2023-4346: KNX Association KNX Protocol Connection Authorization
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability. KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device.
- CISA KEV-listed (remediation due 2026-07-29)
- EPSS 0.9% (56.4% percentile)
- CVSS 7.5 high