What’s Vulnerable › Vulnerabilities

CVE-2021-43575

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-11-09 · updated 2026-06-17
• Weakness: CWE-798

Description

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic key material when it is not being exported

Affected products

• Knx Engineering Tool Software 6: 6.0.0

References

• https://github.com/robertguetzkow/ets5-password-recovery
• https://github.com/robertguetzkow/ets5-password-recovery

Get alerted when CVE-2021-43575 or the next vulnerability affects your stack