title: free@home System Access Point FW integrity check can be bypassed.
description: The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.
problem types: CWE-200 Information Exposure
affected:
{
product: System Access Point
vendor: ABB
versions:
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006200A0156, versionType: custom
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006200A0155, versionType: custom
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006220A0240, versionType: custom
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006220A0136, versionType: custom
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006200A0130, versionType: custom
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006200A0105, versionType: custom
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006200A0071, versionType: custom
}
{
product: System Access Point
vendor: Busch-Jaeger
versions:
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006220A0031, versionType: custom
lessThanOrEqual: 2.6.3, status: affected, version: 2CKA006200A0154, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
version: 3.1
]