MMS File Transfer Vulnerability impact on Distribution Automation products
Description
Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.
Affected products
15>=1.0.0, <2.0.3+ 7 more
- (no CPE)range: >=1.0.0, <2.0.3
- (no CPE)range: 1.0.0
- (no CPE)range: 4.1.0
- (no CPE)range: 4.1.0
- (no CPE)range: 5.0.0
- (no CPE)range: 5.1.0
- (no CPE)range: 2.0.0
- (no CPE)range: 2.1.0
>=1.0.0, <1.0.8+ 4 more
- (no CPE)range: >=1.0.0, <1.0.8
- (no CPE)range: 2.0.0
- (no CPE)range: 1.0.0
- (no CPE)range: 1.1.0
- (no CPE)range: 1.2.0
- ABB/Merging Unit- SMU615v5Range: 1.0.0
- ABB/Remote Monitoring and Control - REC615v5Range: 1.0.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.