Skip to content
OpenAdvisories
High ICSA-26-148-03 1 CVE

ABB EIBPORT

Published Oct 7, 2025 · Updated May 28, 2026 · Revision 2

Vendor: ABB Product: EIBPORT V3 KNX Product: EIBPORT V3 KNX GSM

Summary

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. A firmware update is available that resolves these privately reported vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could access sensitive information stored inside the device and can change the configuration of the device .

Vulnerabilities 1

  • High 8.0
    CVE-2021-22291

    EIBPORT Reflected XSS

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.

    ABB EIBPORT V3 KNX EIBPORT V3 KNX GSM ICS / OT

Revision history

  1. #2

    Initial CISA Republication of ABB PSIRT 9AKK108471A7808 advisory

  2. #1

    Initial version

References