CVSS 3.1
8.8 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-25556
High (8.8) in schneider-electric. EPSS 0.4% chance of exploitation in the next 30 days.
A CWE-287: Improper Authentication vulnerability exists that could allow a device to be
compromised when a key of less than seven digits is entered and the attacker has access to the
KNX installation.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:merten_instabus_tastermodul_1fach_system_m_firmware
- schneider-electric:merten_instabus_tastermodul_2fach_system_m_firmware
- schneider-electric:merten_jalousie-\/schaltaktor_reg-k\/8x\/16x\/10_m._hb_firmware
- schneider-electric:merten_knx_argus_180\/2\,20m_up_system_firmware
- schneider-electric:merten_knx_schaltakt.2x6a_up_m.2_eing._firmware
- schneider-electric:merten_knx_uni-dimmaktor_ll_reg-k\/2x230\/300_w_firmware
- schneider-electric:merten_tasterschnittstelle_4fach_plus_firmware