CVE-2021-22276
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD
Description
The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.
Affected (5)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.4 |
| Running on/with | Platform Versions |
|---|---|
Abb System Access Point 2.0 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.4 |
| Running on/with | Platform Versions |
|---|---|
Abb System Access Point 127v | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.4 |
| Running on/with | Platform Versions |
|---|---|
Abb Wl System Access Point 127v | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.4 |
| Running on/with | Platform Versions |
|---|---|
Abb Wl System Access Point | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.4 |
| Running on/with | Platform Versions |
|---|---|
Abb Wl System Access Point 2.0 | All versions |
Related CWEs
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-354
Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.
References (2)
Source: cybersecurity@ch.abb.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.