KNX Gateway Detection Scanner
This scanner detects the use of KNX Gateway in digital assets.
Short Info
Level
Critical
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
10 seconds
Time Interval
4 weeks
Scan only one
Domain, IPv4
Toolbox
-
KNX Gateway is a product widely used in building automation systems to control lighting, heating, and other smart devices. It facilitates seamless communication between devices in homes, offices, and industrial environments, enhancing energy efficiency and user convenience. KNX gateways are designed to integrate with multiple devices and standards, making them a versatile choice for professionals in the field of smart building solutions.
This scanner detects the presence of KNX Gateway by analyzing responses to a KNX Description Request. It helps identify KNX-enabled devices on a network, providing valuable insight for network administrators. The detection process focuses on analyzing specific attributes like the KNX address, device serial number, and supported KNXnet/IP service families.
Technically, the scanner sends a KNX Description Request over UDP on port 3671. The response includes various parameters, such as the KNX address, friendly device name, multicast address, and supported services. This information is parsed and presented in a structured format for ease of analysis. The script utilizes the KNX protocol standards to ensure accurate detection.
If this vulnerability is exploited, it could lead to potential reconnaissance of network-connected building automation devices. An attacker might gather information about device configurations, serial numbers, and network topology. While this detection does not directly compromise security, it could facilitate further targeted attacks if sensitive configurations are revealed.
REFERENCES
