CVE-2023-25556 HIGH

Published: 2023-04-18 | Last Modified: 2024-11-21 | Status: Modified

Description

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.

CVSS Metrics

Base Score: 8.8 (HIGH)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector	ADJACENT_NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 5.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-287

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	merten_instabus_tastermodul_1fach_system_m_firmware	1.0	<built-in method update of dict object at 0x7e60bacd6dc0>	Operating System
schneider-electric	merten_instabus_tastermodul_2fach_system_m_firmware	1.0	<built-in method update of dict object at 0x7e6111c1c480>	Operating System
schneider-electric	merten_tasterschnittstelle_4fach_plus_firmware	1.0	<built-in method update of dict object at 0x7e61109d5ec0>	Operating System
schneider-electric	merten_tasterschnittstelle_4fach_plus_firmware	1.2	<built-in method update of dict object at 0x7e6111c1cc40>	Operating System
schneider-electric	merten_knx_argus_180\/2\,20m_up_system_firmware	1.0	<built-in method update of dict object at 0x7e60bacd7bc0>	Operating System
schneider-electric	merten_jalousie-\/schaltaktor_reg-k\/8x\/16x\/10_m._hb_firmware	1.0	<built-in method update of dict object at 0x7e60bacd7d00>	Operating System
schneider-electric	merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w_firmware	1.0	<built-in method update of dict object at 0x7e60bacd6d40>	Operating System
schneider-electric	merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w_firmware	1.1	<built-in method update of dict object at 0x7e60bacd6840>	Operating System
schneider-electric	merten_knx_schaltakt.2x6a_up_m.2_eing._firmware	0.1	<built-in method update of dict object at 0x7e6111c1d880>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:merten_instabus_tastermodul_1fach_system_m_firmware:1.0:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:merten_instabus_tastermodul_1fach_system_m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:merten_instabus_tastermodul_2fach_system_m_firmware:1.0:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:merten_instabus_tastermodul_2fach_system_m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:merten_tasterschnittstelle_4fach_plus_firmware:1.0:::::::*`
Yes	`cpe:2.3:o:schneider-electric:merten_tasterschnittstelle_4fach_plus_firmware:1.2:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:merten_tasterschnittstelle_4fach_plus:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:merten_knx_argus_180\/2\,20m_up_system_firmware:1.0:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:merten_knx_argus_180\/2\,20m_up_system:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:merten_jalousie-\/schaltaktor_reg-k\/8x\/16x\/10_m._hb_firmware:1.0:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:merten_jalousie-\/schaltaktor_reg-k\/8x\/16x\/10_m._hb:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w_firmware:1.0:::::::*`
Yes	`cpe:2.3:o:schneider-electric:merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w_firmware:1.1:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:merten_knx_schaltakt.2x6a_up_m.2_eing._firmware:0.1:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:merten_knx_schaltakt.2x6a_up_m.2_eing.:-:::::::*`

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-03.pdf
Source: [email protected]

Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-03.pdf
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory