CVE-2024-8036 Unauthorized Modifications of Firmware and Configuration
ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.
Problem types: cwe_id: CWE-347
description: CWE-347 Improper Verification of Cryptographic Signature
Affected products: vendor: ABB
product: Relion Protection Relays RE_611 IEC
default_status: unaffected
vendor: ABB
product: Relion Protection Relays REF615 IEC
default_status: unaffected
vendor: ABB
product: Relion Protection Relays REF615 ANSI
default_status: unaffected
vendor: ABB
product: Relion Protection Relays REX615
default_status: unaffected
vendor: ABB
product: Relion Protection Relays REX610
default_status: unaffected
vendor: ABB
product: Relion Protection Relays REX640
default_status: unaffected
vendor: ABB
product: Substation Merging Unit SMU615
default_status: unaffected
vendor: ABB
product: Smart Substation Control and Protection SSC600
default_status: unaffected
vendor: ABB
product: Relion Protection Relays REF615R ANSI
default_status: unaffected
vendor: ABB
product: Relion Protection Relays RED615 IEC
default_status: unaffected
vendor: ABB
product: Relion Protection Relays 615 series IEC
default_status: unaffected
vendor: ABB
product: Relion Protection Relays 615 series CN
default_status: unaffected
vendor: ABB
product: Relion Protection Relays 615 series ANSI
default_status: unaffected
vendor: ABB
product: Relion Protection Relays RER615
default_status: unaffected
vendor: ABB
product: Relion Protection Relays REC615
default_status: unaffected
vendor: ABB
product: RBX615
default_status: unaffected
vendor: ABB
product: RER620 ANSI
default_status: unaffected
vendor: ABB
product: 620 Series IEC/CN
default_status: unaffected
vendor: ABB
product: RE_630
default_status: unaffected
vendor: ABB
product: RIO600
default_status: unaffected
vendor: ABB
product: COM600
default_status: unaffected
vendor: ABB
product: SPA ZC-400
default_status: unaffected
vendor: ABB
product: COM600F ANSI
default_status: unaffected
vendor: ABB
product: SPA ZC-402
default_status: unaffected
vendor: ABB
product: REF542plus
default_status: unaffected
vendor: ABB
product: SUE 3000
default_status: unaffected
vendor: ABB
product: ARG600/ARP600/ARR600/ARC600 single SIM
default_status: unaffected
vendor: ABB
product: ARG600/ARP600 dual SIM
default_status: unaffected
vendor: ABB
product: ARM600
default_status: unaffected
vendor: ABB
product: REC601/RER601
default_status: unaffected
vendor: ABB
product: REC603/RER603
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H
version: 3.1
Credits: lang: en
value: ABB thanks Jos Wetzels from Midnight Blue (midnightblue.nl) for helping to identify the vulnerabilities and protecting our customers.
Published: 2024-10-25T16:57:31.114Z