Exploited Vulnerabilities DailyCVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1
EPSS1.2%No. 1649 of 1739 in KEV
CVE year2023~3 yrs before listing
Same vendor in KEV1
Same product1
| Field | Value |
|---|---|
| Vendor | KNX Association |
| Product | KNX Protocol Connection Authorization Option 1 |
| Name | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability |
| Added to KEV | 2026-07-15 |
| US federal due date | 2026-07-29 |
| Ransomware use | Unknown |
| CWE | CWE-645 |
CISA description
KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A KNX Association KNX Protocol Connection Authorization Option 1 vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2026-07-15.