CISA KEV: CVE-2023-4346 — KNX Association KNX Protocol Connection Authorization Option 1 actively exploited

KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability. KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD