CVE-2021-22272

The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch remotely under very specific circumstances. The issue is fixed in the cloud side of the system. No firmware update is needed for customer products. If a user wants to understand if (s)he is affected, please read the advisory. This issue affects: ABB and Busch-Jaeger, ControlTouch

• CWE-200

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A3688&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A3688&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory

Published

Sep 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22261A stored Cross-Site Scripting vulnerability in the Jira inte…4.8
• CVE-2021-22262Missing access control in all GitLab versions starting from …4.3
• CVE-2021-22263An issue has been discovered in GitLab affecting all version…6.5
• CVE-2021-22264An issue has been discovered in GitLab affecting all version…6.5
• CVE-2021-22267Idelji Web ViewPoint Suite, as used in conjunction with HPE …5.9
• CVE-2021-2227Vulnerability in the Oracle Cash Management product of Oracl…8.1
• CVE-2021-22275Buffer Overflow vulnerability in B&R Automation Runtime webs…8.6
• CVE-2021-22276The vulnerability allows a successful attacker to bypass the…5.5
• CVE-2021-22277Improper Input Validation vulnerability in ABB 800xA, Contro…7.5
• CVE-2021-22278A certificate validation vulnerability in PCM600 Update Mana…6.7
• CVE-2021-22279A Missing Authentication vulnerability in RobotWare for the …9.8
• CVE-2021-2228Vulnerability in the Oracle Incentive Compensation product o…8.1