Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2023-25556

CVE-2023-25556

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Merten INSTABUS Tastermodul 1fach System M 625199

Default version status: unaffected

  • Program Version 1.0affected

Schneider Electric Merten INSTABUS Tastermodul 2fach System M 625299

Default version status: unaffected

  • Program Version 1.0affected

Schneider Electric Merten Tasterschnittstelle 4fach plus 670804

Default version status: unaffected

  • Program Version 1.0affected
  • Program Version 1.2affected

Schneider Electric Merten KNX ARGUS 180/2,20M UP SYSTEM 631725

Default version status: unaffected

  • Program Version 1.0affected

Schneider Electric Merten Jalousie-/Schaltaktor REG-K/8x/16x/10 m. HB 649908

Default version status: unaffected

  • Program Version 1.0affected

Schneider Electric Merten KNX Uni-Dimmaktor LL REG-K/2x230/300 W MEG6710-0002

Default version status: unaffected

  • Program Version 1.0affected
  • Program Version 1.1affected

Schneider Electric Merten KNX Schaltakt.2x6A UP m.2 Eing. MEG6003-0002

Default version status: unaffected

  • Program Version 0.1affected

References