Unrated severityNVD Advisory· Published Apr 18, 2023· Updated Feb 5, 2025

CVE-2023-25556

Description

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.

Affected products

Schneider Electric/KNXllm-create
Schneider Electric/Merten Knx Uni Dimmaktor Ll Reg K/2x230/300 W Meg6710 0002v5
Range: Program Version 1.0
Schneider Electric/Merten Knx Schaltakt.2x6a Up M.2 Eing. Meg6003 0002v5
Range: Program Version 0.1
Schneider Electric/Merten Instabus Tastermodul 2fach System M 625299v5
Range: Program Version 1.0

Patches

Vulnerability mechanics

References

download.schneider-electric.com/filesmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000