CVE-2021-22283
Assigner: ABB
Published: 2023-02-28T04:21:41.776Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Relion protection relays - 611 series
vendor: ABB
versions: lessThan: 2.0.3
status: affected
version: 1.0.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - 615 series IEC 4.0 FP1
vendor: ABB
versions: lessThan:  4.1.9
status: affected
version: 4.1.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - 615 series CN 4.0 FP1
vendor: ABB
versions: lessThan: 4.1.8
status: affected
version: 4.1.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - 615 series IEC 5.0
vendor: ABB
versions: lessThan: 5.0.12
status: affected
version: 5.0.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - 615 series IEC 5.0 FP1
vendor: ABB
versions: lessThan: 5.1.20
status: affected
version: 5.1.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - 620 series IEC/CN 2.0
vendor: ABB
versions: lessThan: 2.0.11
status: affected
version: 2.0.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - 620 series IEC/CN 2.0 FP1
vendor: ABB
versions: lessThan: 2.1.15
status: affected
version: 2.1.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - REX640 PCL1
vendor: ABB
versions: lessThan: 1.0.8
status: affected
version: 1.0.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - REX640 PCL2
vendor: ABB
versions: lessThan: 1.1.4
status: affected
version: 1.1.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - REX640 PCL3
vendor: ABB
versions: lessThan: 1.2.1
status: affected
version: 1.2.0
versionType: firmware
defaultStatus: unaffected
product: Relion protection relays - RER615
vendor: ABB
versions: lessThan: 2.0.3
status: affected
version: 2.0.0
versionType: firmware
defaultStatus: unaffected
product: Remote Monitoring and Control - REC615
vendor: ABB
versions: lessThan: 2.0.3
status: affected
version: 1.0.0
versionType: firmware
defaultStatus: unaffected
product: Merging Unit- SMU615
vendor: ABB
versions: lessThan: 1.0.2
status: affected
version: 1.0.0
versionType: firmware
datePublic: 2022-12-18T18:30:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.<p>This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.</p>
value: Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.


impacts: capecId: CAPEC-216
descriptions: value: CAPEC-216 Communication Channel Manipulation
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-665
description: CWE-665 Improper Initialization
type: CWE
source: discovery: UNKNOWN
title: MMS File Transfer Vulnerability impact on Distribution Automation products
x_generator: engine: Vulnogram 0.1.0-dev