Approved changes feed: RSS · Atom

cpe:2.3:a:abb:mybuildings.abb.com:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAbb (6be1db4f-4f59-5a03-a118-0ff43377170e)
ProductMybuildings.Abb.Com (936706fe-b448-599f-845d-e2aaa068e487)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22272 vulnerable 2026-06-08 05:30:00.069177 ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase.
MEDIUM (6.5)
The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch remotely under very specific circumstances. The issue is fixed in the cloud side of the system. No firmware update is needed for customer products. If a user wants to understand if (s)he is affected, please read the advisory. This issue affects: ABB and Busch-Jaeger, ControlTouch
Published: 2021-09-27T13:40:32.018Z
Updated: 2024-09-16T19:30:00.538Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.