Active Attacks on KNX Smart Building Protocol Leave Hardware Permanently Bricked

A five-year-old KNX smart building protocol vulnerability (CVE-2023-4346) allows attackers to permanently brick building automation hardware by setting an irreversible password lock and wiping device firmware. CISA added it to its Known Exploited Vulnerabilities catalog on 15 July 2026, triggering a federal mitigation deadline, but the flaw affects 172 countries and hundreds of millions of devices globally with no factory reset path available.

This Wire brief sits within Fusion42's coverage of Smart Buildings and Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.