Skip to content
OpenAdvisories
Medium ICSA-26-209-07 1 CVE

ABB KNX Update Tool

Published Jul 17, 2026 · Updated Jul 28, 2026 · Revision 2

Vendor: ABB Product: KNX Update Tool (ABB) Product: KNX Update Tool (BJE)

Summary

ABB has been contacted by a researcher who identified a vulnerability in one of its products. ABB has been contacted by a researcher who identified a vulnerability in one of its products. The vulnerability report has been shared in responsible disclosure.

An attacker who successfully exploited this vulnerability could cause the product to become unusable.
ABB confirms the vulnerability but at the same time acknowledges that the issue affects exclusively classic KNX devices that are not supporting the latest KNX Secure standard. Due to a lack of security in legacy KNX devices, the issue cannot be resolved via a software change. In order to actively exploit this vulnerability, an attacker requires physical access to the bus, the affected device is connected to.

ABB has no plans of corrective measures.

Vulnerabilities 1

  • Medium 6.4
    CVE-2026-12705

    Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool

    Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue affects KNX Update Tool (ABB): through 2.0.175; KNX Update Tool (BJE): through 2.0.175.

    ABB KNX Update Tool (ABB) KNX Update Tool (BJE) ICS / OT

Revision history

  1. #2

    Initial CISA Republication of ABB PSIRT 9AKK108472A9270 advisory

  2. #1

    Initial version

References