CVE-2023-25556: Schneider Electric Merten Instabus Tastermodul 1fach System M Firmware

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.

Affected products

• Schneider Electric Merten Instabus Tastermodul 1fach System M Firmware: version 1.0 only
• Schneider Electric Merten Instabus Tastermodul 2fach System M Firmware: version 1.0 only
• Schneider Electric Merten Jalousie-/schaltaktor Reg-k/8x/16x/10 M. Hb Firmware: version 1.0 only
• Schneider Electric Merten KNX Argus 180/2,20m Up System Firmware: version 1.0 only
• Schneider Electric Merten KNX schaltakt.2x6a Up m.2 Eing. Firmware: version 0.1 only
• Schneider Electric Merten KNX Uni-Dimmaktor Ll Reg-k/2x230/300 W Firmware: version 1.0 only; version 1.1 only
• Schneider Electric Merten Tasterschnittstelle 4fach Plus Firmware: version 1.0 only; version 1.2 only

Published 2023-04-18. Last modified 2026-06-17.