CVE-2021-22276 free@home System Access Point FW integrity check can be bypassed.
Attackers can bypass firmware integrity checks on ABB free@home System Access Points, potentially allowing unauthorized firmware access or modification.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-22276?
CVE-2021-22276 is a medium-severity vulnerability in ABB System Access Point, published on 23 Sep 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.
Which versions are affected by CVE-2021-22276?
It affects 5 products.
Products include Abb System Access Point 127v Firmware, Abb System Access Point 2.0 Firmware, Abb Wl-System Access Point 127v Firmware, Abb Wl-System Access Point 2.0 Firmware, Abb Wl-System Access Point Firmware.
How do I fix CVE-2021-22276?
No fix has been published for CVE-2021-22276 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-22276 being exploited?
There is no known exploitation of CVE-2021-22276 in the wild and no public exploit code.
Sources
Also known as GHSA-333w-grm8-fgcg.