Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s://gitlab.com/gitlab-org/gitlab/-/issues/336074 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22248.json
CVE ID: CVE-2021-22249 State: PUBLISHED Published: 2021-08-23T19:53:20 Last Updated: 2024-08-03T18:37:18.281Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure through an error message in GitLab Description: A verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a user invited to a group Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/331857 - https://hackerone.com/reports/1204320 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22249.json
CVE ID: CVE-2021-22250 State: PUBLISHED Published: 2021-08-25T18:28:30 Last Updated: 2024-08-03T18:37:18.267Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for their account Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/332410 - https://hackerone.com/reports/1205916 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22250.json
CVE ID: CVE-2021-22251 State: PUBLISHED Published: 2021-08-23T19:38:04 Last Updated: 2024-08-03T18:37:18.163Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper input validation in GitLab Description: Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain that should be blocked by group settings Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/14004 - https://hackerone.com/reports/679567 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-2
-/issues/14004 - https://hackerone.com/reports/679567 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22251.json
CVE ID: CVE-2021-22252 State: PUBLISHED Published: 2021-08-23T19:36:39 Last Updated: 2024-08-03T18:37:18.277Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Incorrect ownership assignment in GitLab Description: A confusion between tag and branch names in GitLab CE/EE affecting all versions since 13.7 allowed a Developer to access protected CI variables which should only be accessible to Maintainers Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/330364 - https://hackerone.com/reports/1186135 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-2
issues/330364 - https://hackerone.com/reports/1186135 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22252.json
CVE ID: CVE-2021-22253 State: PUBLISHED Published: 2021-08-23T19:34:47 Last Updated: 2024-08-03T18:37:18.258Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to protected environments under specific conditions after the access has been removed Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/323794 - https://hackerone.com/reports/1113783 - https://gitlab.com/gitlab-org
s://gitlab.com/gitlab-org/gitlab/-/issues/323794 - https://hackerone.com/reports/1113783 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22253.json
CVE ID: CVE-2021-22254 State: PUBLISHED Published: 2021-08-20T17:37:29 Last Updated: 2024-08-03T18:37:18.539Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper encoding or escaping of output in GitLab Description: Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/300265 - https://hackerone.com/reports/1087806 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22254.json
CVE ID: CVE-2021-22255 State: PUBLISHED Published: 2021-08-20T17:53:33 Last Updated: 2024-08-03T18:37:18.499Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Baserow B.V. Products: Baserow Problem Types: Server-side request forgery (ssrf) in Baserow Description: SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/bramw/baserow/-/issues/370 - https://baserow.io/blog/march-2021-release-of-baserow - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE
/370 - https://baserow.io/blog/march-2021-release-of-baserow - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22255.json
CVE ID: CVE-2021-22256 State: PUBLISHED Published: 2021-08-25T18:30:43 Last Updated: 2024-08-03T18:37:18.477Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/326948 - https://hackerone.com/reports/1117768 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22256.json
CVE ID: CVE-2021-22257 State: PUBLISHED Published: 2021-10-05T13:46:53 Last Updated: 2024-08-03T18:37:18.503Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. The route for /user.keys is not restricted on instances with public visibility disabled. This allows user enumeration on such instances. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/git
on on such instances. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/23832 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22257.json
CVE ID: CVE-2021-22258 State: PUBLISHED Published: 2021-10-05T13:49:33 Last Updated: 2024-08-03T18:37:18.484Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/24231 - https://hackerone.com/reports/410436 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22258.json
CVE ID: CVE-2021-22259 State: PUBLISHED Published: 2021-10-04T16:51:58 Last Updated: 2024-08-03T18:37:18.508Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/335146 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22259.json
CVE ID: CVE-2021-22260 State: PUBLISHED Published: 2021-11-04T23:10:38 Last Updated: 2024-08-03T18:37:18.503Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the victim's behalf Additional Analyst Notes: - CVE Program Container:
attacker to execute arbitrary JavaScript code on the victim's behalf Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/336614 - https://hackerone.com/reports/1257383 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22260.json
CVE ID: CVE-2021-22261 State: PUBLISHED Published: 2021-10-05T13:59:40 Last Updated: 2024-08-03T18:37:18.487Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: A stored Cross-Site Scripting vulnerability in the Jira integration in all GitLab versions starting from 13.9 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the victim's behalf via malicious Jira API responses Additional Analyst Notes: - C
execute arbitrary JavaScript code on the victim's behalf via malicious Jira API responses Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/328389 - https://hackerone.com/reports/1132083 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22261.json
CVE ID: CVE-2021-22262 State: PUBLISHED Published: 2021-10-05T13:48:15 Last Updated: 2024-08-03T18:37:18.492Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: Missing access control in all GitLab versions starting from 13.12 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 with Jira Cloud integration enabled allows Jira users without administrative privileges to add and remove Jira Connect Namespaces via the GitLab.com for Jira Cloud application configuration page Additional Analyst Notes: - CVE Program Container
paces via the GitLab.com for Jira Cloud application configuration page Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/327062 - https://hackerone.com/reports/1147812 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22262.json
CVE ID: CVE-2021-22263 State: PUBLISHED Published: 2021-10-11T16:47:47 Last Updated: 2024-08-03T18:37:18.536Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper privilege management in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. A user account with 'external' status which is granted 'Maintainer' role on any project on the GitLab instance where 'project tokens' are allowed may elevate its privilege to 'Internal' and access Internal projects. Additional
ance where 'project tokens' are allowed may elevate its privilege to 'Internal' and access Internal projects. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/331473 - https://hackerone.com/reports/1193062 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22263.json
CVE ID: CVE-2021-22264 State: PUBLISHED Published: 2021-10-05T13:45:31 Last Updated: 2024-08-03T18:37:18.500Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper privilege management in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. Under specialized conditions, an invited group member may continue to have access to a project even after the invited group, which the member was part of, is deleted. Additional Analyst Notes: - CVE Program Container: Referenc
the invited group, which the member was part of, is deleted. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/336073 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22264.json
CVE ID: CVE-2021-22267 State: PUBLISHED Published: 2021-02-09T18:23:28 Last Updated: 2024-08-03T18:37:18.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through T0952H01^AAQ, T0986H01 through T0986H01^AAE, T0665H01^AAO, and T0662H01^AAO (J and H). Additional Analyst Notes: - CVE Program Container: References: - https://idelji.com - https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.x
- CVE Program Container: References: - https://idelji.com - https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04076en_us
CVE ID: CVE-2021-22272 State: PUBLISHED Published: 2021-09-27T13:40:32.018316Z Last Updated: 2024-09-16T19:30:00.538Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: ABB, Busch-Jaeger Products: mybuildings.abb.com, my.busch-jaeger.de Problem Types: CWE-200 Description: The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch remotely under very specific circumstances. The issue is fixed in the cloud side of the system. No fi
rol a ControlTouch remotely under very specific circumstances. The issue is fixed in the cloud side of the system. No firmware update is needed for customer products. If a user wants to understand if (s)he is affected, please read the advisory. This issue affects: ABB and Busch-Jaeger, ControlTouch Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A3688&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2021-22275 State: PUBLISHED Published: 2022-05-13T14:23:20 Last Updated: 2024-08-03T18:37:18.446Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: B&R Automation Products: Automation Runtime webserver Problem Types: CWE-120 Description: Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.br-automation.com/downloads_br_productcatalogue/assets/1625405588264-en-original-1.0.pdf
CVE ID: CVE-2021-22276 State: PUBLISHED Published: 2021-09-23T15:20:42.229576Z Last Updated: 2024-09-16T20:58:27.861Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: ABB, Busch-Jaeger Products: System Access Point Problem Types: CWE-200 Description: The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A6475&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2021-22277 State: PUBLISHED Published: 2022-04-01T22:17:43.044264Z Last Updated: 2024-09-17T01:41:41.993Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ABB Products: 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl Problem Types: CWE-20 Description: Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com
to cause the denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=7PAA001499&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2021-22278 State: PUBLISHED Published: 2021-10-28T12:45:58.086957Z Last Updated: 2024-09-16T18:23:59.443Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: ABB, Hitachi Energy Products: PCM600, PCM600 Update Manager Problem Types: CWE-295 Description: A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001142&LanguageCode=en&DocumentPartId=&Action=Launch - https://search.abb.com/library/Download.aspx?DocumentI
mentID=2NGA001142&LanguageCode=en&DocumentPartId=&Action=Launch - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000056&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2021-22279 State: PUBLISHED Published: 2021-12-13T15:48:03.846890Z Last Updated: 2024-09-16T17:38:50.816Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: RobotWare Problem Types: CWE-306 Description: A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=SI20265&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2021-22280 State: PUBLISHED Published: 2024-05-14T19:36:51.930Z Last Updated: 2024-08-03T18:37:18.537Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: B&R Industrial Automation Products: Automation Studio Problem Types: DLL Hijacking Vulnerability in Automation Studio Description: Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to execute code in the context of the product. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.br-automation.com/fileadmin/2021-10_DLL_Hijacking_Vulnerability_in_Automation_Studio-7dd34511.pdf
CVE ID: CVE-2021-22281 State: PUBLISHED Published: 2024-02-02T07:24:29.599Z Last Updated: 2024-08-21T17:32:38.731Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: B&R Industrial Automation Products: Automation Studio Problem Types: CWE-23 Description: : Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/2021-11_ZipSlip_Vulnerability_in_Automation_Studio_Project_Import-b90d2f42.pdf
CVE ID: CVE-2021-22282 State: PUBLISHED Published: 2024-02-02T06:38:32.358Z Last Updated: 2025-06-17T21:29:23.035Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: B&R Industrial Automation Products: Automation Studio Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/2021-12_RCE_Vulnerability_in_BnR_Automation_Studio-1b993aeb.pdf
CVE ID: CVE-2021-22283 State: PUBLISHED Published: 2023-02-28T04:21:41.776Z Last Updated: 2025-03-07T18:12:14.516Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ABB Products: Relion protection relays - 611 series, Relion protection relays - 615 series IEC 4.0 FP1, Relion protection relays - 615 series CN 4.0 FP1, Relion protection relays - 615 series IEC 5.0, Relion protection relays - 615 series IEC 5.0 FP1, Relion protection relays - 620 series IEC/CN 2.0, Relion protection relays - 620 series IEC/CN 2.0 FP1, Relion protection relays - REX640 PCL1, Relion protection relays - REX640 PCL2, Relion protection relays - REX640 PCL3, Relion protection relays -
REX640 PCL1, Relion protection relays - REX640 PCL2, Relion protection relays - REX640 PCL3, Relion protection relays - RER615, Remote Monitoring and Control - REC615, Merging Unit- SMU615 Problem Types: CWE-665 Description: Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protectio
B Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from
rotection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2. Additional Analyst Notes: - CVE Pro
ol - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch