Threat Investigation
Request a demo

CVE-2021-22291

High

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.

SeverityHigh
CVSS8.0
Exploit probability—
ProductEIBPORT V3 KNX
PublishedOct 7, 2025
First seenOct 7, 2025
Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update
  • ABB EIBPORT V3 KNX3.9.2 or later
  • ABB EIBPORT V3 KNX GSM3.9.2 or later

Affected products

ProductAffected versionsFixed in
ABB EIBPORT V3 KNXv < 3.9.23.9.2
ABB EIBPORT V3 KNX GSMv < 3.9.23.9.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.