CVE-2023-25556 — Schneider Electric / Merten INSTABUS Tastermodul 1fach System M 625199

Description (CNA)

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Merten INSTABUS Tastermodul 1fach System M 625199	affected Program Version 1.0
Schneider Electric / Merten INSTABUS Tastermodul 2fach System M 625299	affected Program Version 1.0
Schneider Electric / Merten Tasterschnittstelle 4fach plus 670804	affected Program Version 1.0; affected Program Version 1.2
Schneider Electric / Merten KNX ARGUS 180/2,20M UP SYSTEM 631725	affected Program Version 1.0
Schneider Electric / Merten Jalousie-/Schaltaktor REG-K/8x/16x/10 m. HB 649908	affected Program Version 1.0
Schneider Electric / Merten KNX Uni-Dimmaktor LL REG-K/2x230/300 W MEG6710-0002	affected Program Version 1.0; affected Program Version 1.1
Schneider Electric / Merten KNX Schaltakt.2x6A UP m.2 Eing. MEG6003-0002	affected Program Version 0.1

CWE

CWE-287

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-03.pdf

ADP enrichment

CVE

No English description supplied.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-03.pdf

CISA-ADP

No English description supplied.

No references supplied.