Vulnerabilities > KNX > High

DATE CVE VULNERABILITY TITLE RISK
2023-08-29 CVE-2023-4346 Unspecified vulnerability in KNX Connection Authorization
KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device.
network
low complexity
knx
7.5
2021-07-19 CVE-2021-36799 Use of Hard-coded Credentials vulnerability in KNX Engineering Tool Software 5
KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information.
local
low complexity
knx CWE-798
8.8