HIGHVulnerability
Verified
Global

CISA KEV: KNX Association KNX Protocol Connection Authorization Option 1 — KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device.

Analysis

KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device. Added to CISA Known Exploited Vulnerabilities catalog on 2026-07-15. Remediation due: 2026-07-29.

Indicators of Compromise (1)

CVE (1)
CVE-2023-4346
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jul 15, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

Weekly Update 515

Apparently, Aussies are so obsessed with coffee that it's referred to as the coffee capital of the world down here (some bits, at least). "But what about Italy?" people ask. Having spent a lot of time in a lot of Italy, no, it's just

Troy Hunt
MEDIUMVulnerability

BofA to buy UK cybersecurity firm MDSec Consulting

Bank of America is acquiring UK-based information security specialist MDSec Consulting as it bids to boost its in-house cyber defences.

Finextra
MEDIUMVulnerabilityPOC

Partior and OpenAssets PoC proves stablecoins and tokenised deposits can settle atomically

Bank-backed global settlement infrastructure platform Partior and digital asset infrastructure provider OpenAssets say that they have completed a joint proof of concept demonstrating atomic delivery-versus-payment between digital assets, regulated stablecoins, and commercial tokenised deposits.

Finextra