As cited
Copy frozen at (site build).
vulnerabilities
ABB KNX Update Tool
ABB disclosed a vulnerability (CVE-2026-12705) in its KNX Update Tool affecting versions 2.0.175 and earlier, where firmware images lack integrity protection. The flaw impacts only legacy KNX devices that do not support the newer KNX Secure standard and requires physical access to the bus to exploit. ABB states the issue cannot be fixed via software due to inherent design limitations in the classic KNX protocol and recommends avoiding legacy KNX devices for sensitive functions like access control.
Why it matters: Organizations deploying legacy KNX devices for critical building automation or access control should assess whether they are running affected versions and consider migrating to KNX Secure-compliant devices or alternative solutions, as no patch is available.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
ABB KNX Update Tool
ABB disclosed a vulnerability (CVE-2026-12705) in its KNX Update Tool affecting versions 2.0.175 and earlier, where firmware images lack integrity protection. The flaw impacts only legacy KNX devices that do not support the newer KNX Secure standard and requires physical access to the bus to exploit. ABB states the issue cannot be fixed via software due to inherent design limitations in the classic KNX protocol and recommends avoiding legacy KNX devices for sensitive functions like access control.
Why it matters: Organizations deploying legacy KNX devices for critical building automation or access control should assess whether they are running affected versions and consider migrating to KNX Secure-compliant devices or alternative solutions, as no patch is available.
- Source published
- First seen by Cybersecurity Tracker