PT-2025-23783 · Unknown · Eibport V3 Knx+1

Published 2025-06-04 · Updated 2025-10-08 · CVE-2024-13967

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EIBPORT V3 KNX versions 3.9.8 and earlier EIBPORT V3 KNX GSM versions 3.9.8 and earlier

Description This issue allows a successful attacker to gain unauthorized access to a configuration web page delivered by the integrated web server of EIBPORT.

Recommendations For EIBPORT V3 KNX versions 3.9.8 and earlier, update to a version later than 3.9.8 to resolve the issue. For EIBPORT V3 KNX GSM versions 3.9.8 and earlier, update to a version later than 3.9.8 to resolve the issue. As a temporary workaround, consider restricting access to the integrated web server until a patch is available.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2024-13967

Affected Products

Eibport V3 Knx

Eibport V3 Knx Gsm

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-13967 · Security Note
• https://twitter.com/CveFindCom/status/1930182772590530896 · Twitter Post
• https://twitter.com/threatsbank/status/1930278399538266500 · Twitter Post
• https://t.me/cvetracker/25377 · Telegram Post
• https://t.me/CVEtracker/33763 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A1621&LanguageCode=en&DocumentPartId=pdf&Action=Launch · Note
• https://twitter.com/cracbot/status/1932029981376540683 · Twitter Post
• https://twitter.com/psytester1/status/1975921102170804670 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1930434505422320070 · Twitter Post
• https://twitter.com/CVEnew/status/1930185217664294949 · Twitter Post