CVE-2024-4009
Replay Attack in KNX Secure Devices
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Replay Attack in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to capture/replay KNX telegram to local KNX Bus-System
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- ABB, Busch-Jaeger 2.4! Display 55, SD/U12.55.11-825
1.00
- ABB, Busch-Jaeger 2.4! Display 55, SD/SD/U12.55.1-825
1.00
- ABB, Busch-Jaeger 2.4! Display 63, SD/U12.63.11-825
1.00
- ABB, Busch-Jaeger RoomTouch 4", RT/U12.86.1-825
1.00
- ABB, Busch-Jaeger RoomTouch 4", RT/U12.86.11-825
1.00
- ABB, Busch-Jaeger 2,4'' Display 70, SD/U12.70.11-4015
1.00
- ABB, Busch-Jaeger 2,4'' Display 70, SD-U12-70-1-4015
1.00
- ABB, Busch-Jaeger RoomTouch 4", RT/U12.86.11-811
1.00
- ABB, Busch-Jaeger RoomTouch 4", RT-U12-86-1-811
1.00
- ABB, Busch-Jaeger BCU KNX, BA-U1.0.11
1.3.0.33
- ABB, Busch-Jaeger BCU KNX, BA-U1.0.1
1.3.0.33
- ABB, Busch-Jaeger BCU KNX, BA-U1.0.21
1.3.0.33