CVE-2023-25556 in Merten KNX Device

요약

\~에 의해 MITRE • 2023. 04. 18.

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 책임이 있는: Schneider Electric SE
• 예약하다: 2023. 02. 07.
• 공개: 2023. 04. 18.
• 모더레이션: 수락
• 항목: VDB-226305
• CPE: 준비됨
• CWE: CWE-287 (확인됨)
• CVSS: 8.8 (NVD)
• EPSS: 0.00358
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Agriculture, Chemical, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-25556
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-25556
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-25556/