Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-22276 EUVD-2021-9422GHSA-333w-grm8-fgcg

free@home System Access Point FW integrity check can be bypassed.

Published Sep 23, 2021 · Updated Sep 16, 2024 · Assigned by ABB

Vendor: ABB Vendor: Busch-Jaeger Product: System Access Point Product: System Access Point Category: ICS / OT

Description

The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.

Affected products

VendorProductAffectedFixed
ABB System Access Point 2CKA006200A0156 – ≤ 2.6.3, 2CKA006200A0155 – ≤ 2.6.3, 2CKA006220A0240 – ≤ 2.6.3, 2CKA006220A0136 – ≤ 2.6.3, 2CKA006200A0130 – ≤ 2.6.3, 2CKA006200A0105 – ≤ 2.6.3, 2CKA006200A0071 – ≤ 2.6.3 —
Busch-Jaeger System Access Point 2CKA006220A0031 – ≤ 2.6.3, 2CKA006200A0154 – ≤ 2.6.3 —

References