CVE-2023-4346KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the devi…
Updated under an hour ago ()
Does this affect you?
It affects KNX Association KNX Protocol Connection Authorization Option 1 and 1 other product. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Jul 15, 2026; federal agencies had to remediate by Jul 29, 2026. Treat that date as your deadline.
Do this next
Free account, 1 product
KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this password can often not be reset without entering the current password. If the device is configured to interface with a network, an attacker with access to that network could interface with the KNX installation, purge all devices without additional security options enabled, and set a BCU key, locking the device. Even if a device is not connected to a network, an attacker with physical access to the device could also exploit this vulnerability in the same way.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-645
- Known exploited
- Added to CISA KEV Jul 15, 2026; federal remediation due Jul 29, 2026Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- EPSS (exploitation in the next 30 days)
- 1.29% (percentile 70)
- Assigned by
- icscert
- NVD analysis
- Analyzed
- Record last updated
- Jul 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
KNX Association KNX Protocol Connection Authorization Option 1 knx_association:knx_protocol_connection_authorization_option_1 (from the name) | 0 | CNA record |
knx connection_authorization knx:connection_authorization | all versions | NVD |
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-01government-resource, third-party-advisory, us-government-resource
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4346us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.