CVE-2024-4009 - CVE House
Back to Database
Status published High CVE-2024-4009

Replay Attack in KNX Secure Devices

Vulnerability Description

Replay Attack in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to capture/replay KNX telegram to local KNX Bus-System

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-4009

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

ABB, Busch-Jaeger

View all reports →

Affected Software

2.4! Display 55, SD/U12.55.11-825, 2.4! Display 55, SD/SD/U12.55.1-825, 2.4! Display 63, SD/U12.63.11-825, RoomTouch 4", RT/U12.86.1-825, RoomTouch 4", RT/U12.86.11-825, 2,4'' Display 70, SD/U12.70.11-4015, 2,4'' Display 70, SD-U12-70-1-4015, RoomTouch 4", RT/U12.86.11-811, RoomTouch 4", RT-U12-86-1-811, BCU KNX, BA-U1.0.11, BCU KNX, BA-U1.0.1, BCU KNX, BA-U1.0.21
Vulnerable Versions:
1.00, 1.3.0.33

Timeline

Official Publish: June 5th, 2024
Last Modified: March 27th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.