free@home System Access Point Firmware Integrity Bypass Advisory

This advisory from ABB details a vulnerability (CVE-2021-22276) in the free@home System Access Point firmware versions 2.6.3 and earlier, where an attacker with local network access can bypass the integrity check to downgrade firmware or install unauthorized software. The vulnerability is resolved in firmware version 2.6.4 and newer, which adds additional integrity checks and secures automatic updates via TLS.