knx records
4 published records for vendor knx.
Researcher profile
- Entered KEV
- 1 · 25%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- 1051 days
Recurring classes
- CWE-798 Use of Hard-coded Credentials2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-645 Overly Restrictive Account Lockout Mechanism1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2023-4346Weaponized | KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked andknx · connection authorization · CWE-645 | High7.5 | KEV | 1.2% | Aug 29, 2023 |
41Plan | CVE-2015-8299Proof of concept | Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via aknx · ets · CWE-119 | Critical9.8 | — | 6.1% | Aug 29, 2017 |
35Monitor | CVE-2021-36799Proof of concept | KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project iknx · engineering tool software 5 · CWE-798 | High8.8 | — | 0.4% | Jul 19, 2021 |
22Monitor | CVE-2021-43575No exploit | KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project iknx · engineering tool software 6 · CWE-798 | Medium5.5 | — | 0.3% | Nov 9, 2021 |
- CVE-2023-434660This week
KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and
HighCVSS 7.5KEVWeaponizedEPSS 1%knx · connection authorizationAug 29, 2023
- CVE-2015-829941Plan
Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a
CriticalCVSS 9.8Proof of conceptEPSS 6%knx · etsAug 29, 2017
- CVE-2021-3679935Monitor
KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project i
HighCVSS 8.8Proof of conceptEPSS 0%knx · engineering tool software 5Jul 19, 2021
- CVE-2021-4357522Monitor
KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project i
MediumCVSS 5.5No exploitEPSS 0%knx · engineering tool software 6Nov 9, 2021