The ABB KNX Update Tool (ABB) and KNX Update Tool (BJE) up to version 2.0.175 suffer from a missing support for integrity check vulnerability (CWE-353). This means the tool does not verify the integrity of updates or data, potentially allowing unauthorized or malicious modifications to go undetected. The CVSS 3.1 vector indicates the attack requires adjacent network access, high attack complexity, low privileges, no user interaction, and impacts integrity and availability. No vendor advisory or patch is currently available, and the vendor has not specified any remediation level.

The vulnerability impacts the integrity and availability of the ABB KNX Update Tool by allowing potential unauthorized modification of update data or tool operations without detection. This could lead to corrupted updates or denial of service conditions. Confidentiality is not impacted. The attack complexity is high and requires adjacent network access with low privileges, limiting the ease of exploitation. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when applying updates with the ABB KNX Update Tool and consider additional integrity verification methods if possible. Monitor vendor communications for updates on patches or mitigations.