KNX system hacks

[Klaus Gütter]

The SCN-SAFE.01 does not prevent manipulation the BCU Password.

The security module prevents all connection-oriented accesses of the ETS.

This is contradictory because the BCU password can only be set with connection-oriented access.

[ergo14]

Ok, that's what MDT replied to me at least

[Beleuchtfix]

Could somebody just test it?

[hjk]

With SCN-SAFE.01 it is normally not possible to transfer the BCU Password to the device, because this writing is connection-oriented and the connection will be closed always.

[Beleuchtfix]

Danke /Thanks

[ergo14]

With SCN-SAFE.01 it is normally not possible to transfer the BCU Password to the device, because this writing is connection-oriented and the connection will be closed always.

Thats not the answer I got from the support

[ergo14]

With SCN-SAFE.01 it is normally not possible to transfer the BCU Password to the device, because this writing is connection-oriented and the connection will be closed always.

I understand that you are MDT representative, correct? So what is the official stance on this

[hjk]

Yes, pls see my answer in #19.

[scw2wi]

So what is the official stance on this

You just have to consider the MDT Support as not competent enough to understand and answer such questions. But I'm pretty sure their next answer to that question will be correct.

[ergo14]

Great, can someone English speaking tell me if there is important information in the manual? There is no English version so I decided to not get the module for the time being

[Hennessy]

I just went quickly through the manual. You can not only prevent unwanted programming, you can also perform supervision of all your KNX-Devices and monitor, if such device is no more working as intended by monitoring regular messages. You could even place switching actuators on dedicated part/segment of your KNX bus cabling as to force reset of the devices connected to such part/segment of your installation.

Basically you can implement security on several levels. First of all restrict access to port 3671 to local network devices only. If you cannot exclude lateral movement in your network, then you should consider additional measures as BCU-Password and/or Security Module (or change devices to KNX Secure). The prevention of lateral movement is a different topic.

[concept]

Great, can someone English speaking tell me if there is important information in the manual? There is no English version so I decided to not get the module for the time being

manual —> copy & paste to google translator