Skip to content
OpenAdvisories
High 9AKK108471A7808 1 CVE

EIBPORT Reflected XSS

Published Oct 7, 2025 · Updated Oct 7, 2025

Vendor: ABB Product: EIBPORT V3 KNX Product: EIBPORT V3 KNX GSM

Summary

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. A firmware update is available that resolves these privately reported vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could access sensitive information stored inside the device and can change the configuration of the device .

Vulnerabilities 1

  • High 8.0
    CVE-2021-22291

    EIBPORT Reflected XSS

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.

    ABB EIBPORT V3 KNX EIBPORT V3 KNX GSM ICS / OT

Revision history

  1. #1

    Initial version

References