Summary
Schneider Electric is aware of a vulnerability in its Merten KNX products.
The Merten KNX products in the table below are home automation products for lighting and
temperature control.
Failure to apply the mitigations provided below may risk an authentication attack against the
BCU Key, which could result in a compromised product.
Vulnerabilities 1
-
High 8.3
A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less …
Revision history
-
#1.0.0
Original Release
References
-
Merten KNX devices - SEVD-2023-045-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-03.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/