EIBPORT V3 KNX Gateway Cybersecurity Advisory

This document is a cybersecurity advisory from ABB detailing a reflected cross-site scripting (XSS) vulnerability (CVE-2021-22291) affecting EIBPORT V3 KNX and KNX GSM LAN gateways with firmware versions below 3.9.2. Successful exploitation could allow an attacker to access sensitive information and change device configuration, and ABB recommends applying the firmware update to version 3.9.2 to mitigate the risk.