MEIFP – Most Exploited Internet-Facing Products

KNX Association

Products: KNX Protocol Connection Authorization Option 1

40.6

Score

CVEs

Active

PoC

KEV

#64

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2023-4346	2023-08-29	7.5v3.1	ACTIVE		Low	None	YES	40.6	KNX Protocol Connection Authorization Option 1	KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this pas

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3