CVE-2021-22276

free@home System Access Point FW integrity check can be bypassed.

State: Published
Severity: 6.1 Medium
Published: Sep 23, 2021
Updated: Sep 16, 2024
Reserved: Jan 5, 2021

Description

The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H	ABB

Weaknesses

CWE-200 Information Exposure

Affected Products

Product	Versions
System Access PointABB	2CKA006200A0156 through 2.6.3Affected 2CKA006200A0155 through 2.6.3Affected 2CKA006220A0240 through 2.6.3Affected 2CKA006220A0136 through 2.6.3Affected 2CKA006200A0130 through 2.6.3Affected 2CKA006200A0105 through 2.6.3Affected 2CKA006200A0071 through 2.6.3Affected
System Access PointBusch-Jaeger	2CKA006220A0031 through 2.6.3Affected 2CKA006200A0154 through 2.6.3Affected

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A6475&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.