CVE-2021-22283
Description
Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.
How to fix
- abb smu615_firmware1.0.2 or later
- abb rec615_firmware2.0.3 or later
- abb rer615_firmware2.0.3 or later
- abb rex640_pcl3_firmware1.2.1 or later
- abb rex640_pcl2_firmware1.1.4 or later
- abb rex640_pcl1_firmware1.0.8 or later
- abb relion_611_firmware2.0.3 or later
- abb relion_615_iec_firmware4.1.9, 5.0.12, 5.1.20 or later
- abb relion_615_cn_firmware4.1.8 or later
- abb relion_620_iec_firmware2.0.11, 2.1.15 or later
- abb relion_620_cn_firmware2.0.11, 2.1.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abb smu615_firmware | v < 1.0.2 | 1.0.2 |
| abb rec615_firmware | v < 2.0.3 | 2.0.3 |
| abb rer615_firmware | v < 2.0.3 | 2.0.3 |
| abb evd4_firmware | No range specified | — |
| abb ref615r_firmware | No range specified | — |
| abb rex640_pcl3_firmware | v < 1.2.1 | 1.2.1 |
| abb rex640_pcl2_firmware | v < 1.1.4 | 1.1.4 |
| abb rex640_pcl1_firmware | v < 1.0.8 | 1.0.8 |
| abb rer620_firmware | No range specified | — |
| abb relion_611_firmware | v < 2.0.3 | 2.0.3 |
| abb ref615_iec_firmware | No range specified | — |
| abb ref615_ansi_firmware | No range specified | — |
| abb red615_iec_firmware | No range specified | — |
| abb relion_615_iec_firmware | No range specified, v < 4.1.9, v < 5.0.12, v < 5.1.20 | 4.1.9, 5.0.12, 5.1.20 |
| abb relion_615_cn_firmware | No range specified, v < 4.1.8 | 4.1.8 |
| abb relion_615_ansi_firmware | No range specified | — |
| abb relion_620_iec_firmware | v < 2.0.11, v < 2.1.15 | 2.0.11, 2.1.15 |
| abb relion_620_cn_firmware | v < 2.0.11, v < 2.1.15 | 2.0.11, 2.1.15 |
| abb relion_620_ansi_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.