Active Attacks on KNX Smart Building Protocol Leave Hardware Permanen…

A five-year-old KNX smart building protocol vulnerability (CVE-2023-4346) allows attackers to permanently brick building automation hardware by setting an irreversible password lock and wiping device firmware. CISA added it to its Known Exploited Vulnerabilities catalog on 15 July 2026, triggering a federal mitigation deadline, but the flaw affects 172 countries and hundreds of millions of devices globally with no factory reset path available. If you're selling anything that plugs into or controls a KNX network — sensors, actuators, gateways, or integration software — your installed base is now a known target for permanent hardware destruction, and your customers have no way to recover. You need to ship a reset path or a network isolation product this month, or your support queue will become a liability.