Knx
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Knx product.
RSS Feeds for Knx security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Knx products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Knx Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 0 vulnerabilities in Knx. Knx did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 1 | 7.50 |
| 2022 | 0 | 0.00 |
| 2021 | 2 | 7.15 |
It may take a day or so for new Knx vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Knx Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2023-4346 | Aug 29, 2023 |
KNX Device Locked via Unresettable BCU KeyKNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this password can often not be reset without entering the current password. If the device is configured to interface with a network, an attacker with access to that network could interface with the KNX installation, purge all devices without additional security options enabled, and set a BCU key, locking the device. Even if a device is not connected to a network, an attacker with physical access to the device could also exploit this vulnerability in the same way. |
Connection Authorization
|
| CVE-2021-43575 | Nov 09, 2021 |
KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan MedvedevKNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic key material when it is not being exported |
Engineering Tool Software 6
|
| CVE-2021-36799 | Jul 19, 2021 |
KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan MedvedevKNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer |
Engineering Tool Software 5
|