CISA alerts on active KNX flaw CVE‑2023‑4346, urges action

THE CISA maintains a Known Exploited Vulnerabilities (KEV) Catalog, which serves as a key resource for cybersecurity professionals to help manage and prioritize vulnerabilities that are actively exploited. The catalog includes details about specific vulnerabilities, such as CVE-2023-4346, which pertains to the KNX Protocol and features an overly restrictive account lockout mechanism. Users are encouraged to apply vendor-specified mitigations and adhere to CISA's guidance for security updates. The KEV catalog is available in multiple formats, and users can nominate new vulnerabilities for inclusion.