{"vulnerability": "cve-2023-4346", "sightings": [{"uuid": "76553663-0cf5-451e-ba50-09e45b95f8bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://t.me/cibsecurity/69389", "content": "\u203c CVE-2023-4346 \u203c\n\nKNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this password can often not be reset without entering the current password. If the device is configured to interface with a network, an attacker with access to that network could interface with the KNX installation, purge all devices without additional security options enabled, and set a BCU key, locking the device. Even if a device is not connected to a network, an attacker with physical access to the device could also exploit this vulnerability in the same way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-30T00:17:42.000000Z"}, {"uuid": "750718b5-390a-4320-99fa-6108bc5e025d", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/32d9d250-a84f-4d69-ab6d-0cf8b9a4c68e", "content": "", "creation_timestamp": "2026-07-15T17:00:02.267779Z"}, {"uuid": "d721ad03-5506-4f9f-9de2-0b7a35866be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mqp7ytwxk72f", "content": "\ud83d\uded1 CVE-2023-4346\nKNX Association KNX Protocol Connection Authorization Option 1\nCVSS 7.5 / EPSS 0% / KEV: No\nTL;DR: KNX devices that use KNX Connection Authorizat\u2026\nhttps://cvesentinel.com/report/CVE-2023-4346?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-15T17:16:57.910839Z"}, {"uuid": "824e0ead-5d37-4880-9cbd-7c967582236f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2023-4346", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mqpc3rakth2x", "content": "CISA added KNX Protocol CVE-2023-4346 to the KEV catalog.\nThe account lockout flaw could let attackers purge devices and lock them with a BCU key. Federal agencies must remediate by July 29.\n\nThe whole story: https://thecircuitry.to/article/cisa-adds-knx-protocol-cve-2023-4346-to-kev-catalog-mrmdk1\u2026", "creation_timestamp": "2026-07-15T17:54:23.870966Z"}, {"uuid": "56363e6d-2cbe-4c7c-8b81-38a50d2942ea", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2e13884-62b5-4b7e-9f7e-242eb02a64b1", "content": "", "creation_timestamp": "2026-07-15T18:00:25.510939Z"}, {"uuid": "a031c013-8be1-428a-bdcb-47ce83a8b8c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqpfagoolj2y", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2023-4346: \nKNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to\u2026\nCVSS 7.5 \u00b7 EPSS 0.5% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2023-4346\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-15T18:50:41.367710Z"}, {"uuid": "5c80d02b-3dbc-4945-8f64-7d3b166a6836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116925424208932956", "content": "CISA has updated the KEV catalogue:\n-  CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability https://www.cve.org/CVERecord?id=CVE-2023-4346\n-  CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-46817\nPress release:\nCISA and Partners Publish Guidance to Help Software Manufacturers and Online Service Providers Work With Security Researchers https://www.cisa.gov/news-events/news/cisa-and-partners-publish-guidance-help-software-manufacturers-and-online-service-providers-work\nHere's the guidance: https://www.cisa.gov/sites/default/files/2026-07/joint-guide-establishing-a-cvd-program-to-work-with-security-researchers_508c.pdf #CISA #infosec #vulnerability", "creation_timestamp": "2026-07-15T18:33:04.716015Z"}, {"uuid": "3a6601ab-8080-4a7d-8a0b-4a10c52507fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6998738", "content": "2026-07-15: [CVE-2023-4346] KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityKNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device. \ncisakev", "creation_timestamp": "2026-07-15T18:47:46.341809Z"}, {"uuid": "c38f2fd5-6fd9-4622-94fc-68a03a2cb49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mqpo74rqbk2e", "content": "Breaking: CISA adds KNX Protocol CVE-2023-4346 to its Known Exploited Vulnerabilities catalog. New York pauses high power data centers while Stripe bids for PayPal and Volkswagen unveils its electric ID. Cross. Watch the verified rundown now.", "creation_timestamp": "2026-07-15T21:31:01.386652Z"}, {"uuid": "074d83f4-1c5b-4fd8-85a1-6506b30ccae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqq6zevtsw24", "content": "CISA KEV catalog now lists CVE-2026-46817, a critical Oracle E-Business Suite flaw, and CVE-2023-4346 in KNX devices. Both are exploited in the wild.\n\n#CISA #KEV #CVE202646817 #Oracle #KNX", "creation_timestamp": "2026-07-16T02:32:03.298884Z"}, {"uuid": "411b65b8-c2b7-45dd-9617-3dac04719012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mqqm4d4fsy2g", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Jul 15)\n\nCVE-2023-4346 KNX\u30a2\u30bd\u30b7\u30a8\u30fc\u30b7\u30e7\u30f3 KNX\u30d7\u30ed\u30c8\u30b3\u30eb\u63a5\u7d9a\u8a8d\u8a3c\u30aa\u30d7\u30b7\u30e7\u30f31 \u904e\u5ea6\u306b\u5236\u9650\u7684\u306a\u30a2\u30ab\u30a6\u30f3\u30c8\u30ed\u30c3\u30af\u30a2\u30a6\u30c8\u30e1\u30ab\u30cb\u30ba\u30e0\u306e\u8106\u5f31\u6027\nCVE-2026-46817 Oracle E-Business Suite\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u6a29\u9650\u7ba1\u7406\u306e\u8106\u5f31\u6027  \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-07-16T06:26:19.854617Z"}, {"uuid": "9c5f5965-4bb9-4801-bdb4-9f6c537aa701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mqsf2ua55a2l", "content": "\ud83d\udea8 ALERT: CVE-2023-4346 allows attackers to purge and lock KNX industrial control devices. If you manage building automation, your perimeter is at risk. Get the forensic indicators and hardening playbooks you need to secure your assets. https://thecybermind.co/m6eo\n\n#CyberSecurity #ICS #KNX #TCM\u2026", "creation_timestamp": "2026-07-16T23:25:34.035032Z"}, {"uuid": "62925858-17d4-462f-bb25-92634545a138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4346", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mridz7h7ed24", "content": "(CISA TS-MAN) CVE-2023-4346 \u2013 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism\u00a0Vulnerability\n\nSeverity: HIGH Impact Summary: An attacker could purge all devices and set a BCU key to lock the device, potentially resulting in denial of\u2026", "creation_timestamp": "2026-07-25T17:05:19.092943Z"}]}