CVE-2026-12705
Received Received - Intake

Missing Integrity Check in ABB KNX Update Tool

Publication date: 2026-07-17

Last updated on: 2026-07-17

Assigner: Asea Brown Boveri Ltd. (ABB)

Description
Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue affects KNX Update Tool (ABB): through 2.0.175; KNX Update Tool (BJE): through 2.0.175.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-17
Last Modified
2026-07-17
Generated
2026-07-17
AI Q&A
2026-07-17
EPSS Evaluated
N/A
NVD
CVE-2026-12705
EUVD
EUVD-2026-45179

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
abb knx_update_tool to 2.0.175 (exc)
bje knx_update_tool to 2.0.175 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-353 The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing integrity check in the ABB KNX Update Tool. It allows attackers to potentially modify or inject malicious updates into the system without detection. The tool fails to verify the authenticity or integrity of updates before applying them.

Impact Analysis

An attacker could exploit this to install unauthorized or malicious firmware on KNX devices. This may lead to unauthorized control of building automation systems, data breaches, or disruption of critical operations in environments using KNX technology.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by enabling unauthorized access to sensitive data or systems. Failure to ensure software integrity may violate requirements for secure updates and data protection in these regulations.

Mitigation Strategies

Update ABB KNX Update Tool (ABB) to version 2.0.176 or later and BJE KNX Update Tool (BJE) to version 2.0.176 or later to address the missing integrity check vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12705. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart