CVE-2021-22276
Assigner: ABB
Published: 2021-06-30T00:00:00
State: PUBLISHED
affected: product: System Access Point
vendor: ABB
versions: lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006200A0156
versionType: custom
lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006200A0155
versionType: custom
lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006220A0240
versionType: custom
lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006220A0136
versionType: custom
lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006200A0130
versionType: custom
lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006200A0105
versionType: custom
lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006200A0071
versionType: custom
product: System Access Point
vendor: Busch-Jaeger
versions: lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006220A0031
versionType: custom
lessThanOrEqual: 2.6.3
status: affected
version: 2CKA006200A0154
versionType: custom
datePublic: 2021-06-30T00:00:00
descriptions: value: The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-200
description: CWE-200 Information Exposure
type: CWE
source: discovery: UNKNOWN
title: free@home System Access Point FW integrity check can be bypassed.
x_generator: engine: Vulnogram 0.0.9