What’s Vulnerable › Vulnerabilities

CVE-2021-22276: free@home System Access Point FW integrity check can be bypassed.

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-23 · updated 2026-06-17
• Weakness: CWE-200

Description

The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.

Affected products

• ABB System Access Point 127V Firmware: before 2.6.4 — fixed in 2.6.4
• ABB System Access Point 2.0 Firmware: before 2.6.4 — fixed in 2.6.4
• ABB Wl-System Access Point 127V Firmware: before 2.6.4 — fixed in 2.6.4
• ABB Wl-System Access Point 2.0 Firmware: before 2.6.4 — fixed in 2.6.4
• ABB Wl-System Access Point Firmware: before 2.6.4 — fixed in 2.6.4

How to fix

Upgrade to a fixed version: ABB System Access Point 127V Firmware 2.6.4; ABB System Access Point 2.0 Firmware 2.6.4; ABB Wl-System Access Point 127V Firmware 2.6.4; ABB Wl-System Access Point 2.0 Firmware 2.6.4; ABB Wl-System Access Point Firmware 2.6.4. Check the vendor advisory for mitigations.

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A6475&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A6475&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2021-22276 or the next vulnerability affects your stack