Vulnerability · Published Jul 17, 2026 · Assigned by ABB
CVE-2026-12705Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool
Medium 6.4
In plain English
A medium-severity security flaw in KNX Update Tool (ABB) from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.2%top 95.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue affects KNX Update Tool (ABB): through 2.0.175; KNX Update Tool (BJE): through 2.0.175.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ABB | KNX Update Tool (ABB) | 0 – through 2.0.175 |
| ABB | KNX Update Tool (BJE) | 0 – through 2.0.175 |
Weakness: CWE-353 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H