CVE-2015-8299

Critical

Published: 29/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet.

Risk Assessment

An attacker can remotely take control of the system, posing a serious threat to the security of the infrastructure.

Recommendation

It is recommended to update to the latest version of KNX ETS to mitigate this vulnerability and to monitor network traffic for suspicious packets.

Original NVD description (English source)

Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet.