CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
KNX Devices BCU Key Lockout Vulnerability (CVE-2023-4346) Analysis and Mitigation Guide
[Affected Scope] KNX-based smart home and building automation devices supporting KNX Connection Authorization and Option 1
[Impact] Attackers can set an unauthorized BCU key via network or physical access, permanently locking and bricking the device (Denial of Service)
[Mitigation] Restrict network exposure of KNX IP interfaces, enable KNX Secure features, and enforce strict physical access controls
Rockwell Automation Studio 5000 & RSLogix 5000 Hardcoded Cryptographic Key Vulnerability (CVE-2021-22681) Technical Advisory
[Affected Scope] Rockwell Automation Studio 5000 Logix Designer v21 and later, RSLogix 5000 v16 through v20, and associated Logix controllers
[Impact] Unauthenticated remote attackers can obtain the hardcoded cryptographic key, bypass verification mechanisms, and gain unauthorized access to modify controller logic or configurations
[Mitigation] Implement network segmentation, restrict EtherNet/IP ports, transition controller keyswitches to 'Run' mode, and deploy CIP Security where applicable