Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-25556

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.

Published

2023-04-18T18:15:07.357

Last Modified

2024-11-21T07:49:43.417

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.3 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric merten_instabus_tastermodul_1fach_system_m_firmware 1.0 Yes
Hardware schneider-electric merten_instabus_tastermodul_1fach_system_m - No
Operating System schneider-electric merten_instabus_tastermodul_2fach_system_m_firmware 1.0 Yes
Hardware schneider-electric merten_instabus_tastermodul_2fach_system_m - No
Operating System schneider-electric merten_tasterschnittstelle_4fach_plus_firmware 1.0 Yes
Operating System schneider-electric merten_tasterschnittstelle_4fach_plus_firmware 1.2 Yes
Hardware schneider-electric merten_tasterschnittstelle_4fach_plus - No
Operating System schneider-electric merten_knx_argus_180\/2\,20m_up_system_firmware 1.0 Yes
Hardware schneider-electric merten_knx_argus_180\/2\,20m_up_system - No
Operating System schneider-electric merten_jalousie-\/schaltaktor_reg-k\/8x\/16x\/10_m._hb_firmware 1.0 Yes
Hardware schneider-electric merten_jalousie-\/schaltaktor_reg-k\/8x\/16x\/10_m._hb - No
Operating System schneider-electric merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w_firmware 1.0 Yes
Operating System schneider-electric merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w_firmware 1.1 Yes
Hardware schneider-electric merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w - No
Operating System schneider-electric merten_knx_schaltakt.2x6a_up_m.2_eing._firmware 0.1 Yes
Hardware schneider-electric merten_knx_schaltakt.2x6a_up_m.2_eing. - No
References