CVE-2023-4346

exploitation · critical · Evidence score 90

Vendor

KNX Association

Affected software

KNX Association KNX Protocol Connection Authorization Option 1

Exploitation signal

Listed in CISA Known Exploited Vulnerabilities

EPSS

0.00907

KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device.