CyberzSOC

Publication detail
← Back to advisories & guidance

ICSA-26-209-07: ABB KNX Update Tool ↗ source

July 28, 2026 CISA ICS Advisory
Source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-07

Summary

ABB has been contacted by a researcher who identified a vulnerability in one of its products. ABB has been contacted by a researcher who identified a vulnerability in one of its products. The vulnerability report has been shared in responsible disclosure. An attacker who successfully exploited this vulnerability could cause the product to become unusable. ABB confirms the vulnerability but at the same time acknowledges that the issue affects exclusively classic KNX devices that are not supporting the latest KNX Secure standard. Due to a lack of security in legacy KNX devices, the issue cannot be resolved via a software change. In order to actively exploit this vulnerability, an attacker requires physical access to the bus, the affected device is connected to. ABB has no plans of corrective measures. CVE-2026-12705: There is no protection of the integrity of the firmware image. This applies exclusively to legacy KNX products

Advisory Details CISA ICS CSAF feed

Advisory ID
ICSA-26-209-07
Status
Final · version 2
Initial release
2026-07-17
Last revised
2026-07-28 (2 revisions)
Vendor
ABB
Critical infrastructure sectors
Critical Manufacturing
Deployed
Worldwide
Vendor headquarters
Switzerland

Republished vendor advisory. This ICSA is a verbatim republication of ABB PSIRT 9AKK108472A9270 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does…

Credit: Qiguang Zhang, Zhen Ling, Junzhou Luo, Chongqing Lei (Southeast University;); Xinwen Fu (University of Massachusetts Lowell); Yue Zhang (Shandong University)

Affected products (2)
  • KNX Update Tool (ABB) — <=2.0.175
  • KNX Update Tool (BJE) — <=2.0.175
Revision history (2)
  • 2026-07-28 — v2: Initial CISA Republication of ABB PSIRT 9AKK108472A9270 advisory
  • 2026-07-17 — v1: Initial version

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2026-12705 CWE-353 Missing Support for Integrity Check 6.4 Medium CVE-2026-12705
There is no protection of the integrity of the firmware image. This applies exclusively to legacy KNX products

Mitigation: Due to the nature of the classic KNX protocol stack and security concept, there are no options to resolve the vulnerability with a software update on a technical level. ABB recommends to follow general security recommendations listed in the security guideline…

Affected, fixed & timeline

Affected:

  • KNX Update Tool (ABB) <=2.0.175
  • KNX Update Tool (BJE) <=2.0.175

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2026-12705 6.4 Medium ABB KNX Update Tool (ABB) Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue affects KNX Update Tool (ABB):…

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

No KEV-catalogued vendors are named in this publication.