Status: KEV | Advisory ID: CVE-2023-4346
| CVE | CVE-2023-4346 |
| Affected products | KNX Association KNX Protocol Connection Authorization Option 1 |
| Exploitation status | Listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating confirmed active exploitation. |
| Classified as | CWE-645 (Overly Restrictive Account Lockout Mechanism) |
| KEV listing | Added to CISA's Known Exploited Vulnerabilities (KEV) catalog on 2026-07-15. |
| Federal remediation deadline | 2026-07-29 (CISA KEV, Binding Operational Directive). |
KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2023-4346 |