CVE-2021-22283

MEDIUM

6.2

Descripcion

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.

Detalles CVE

Puntuacion CVSS v3.16.2

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado2/28/2023

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

abb:evd4abb:evd4_firmwareabb:rec615abb:rec615_firmwareabb:red615_iecabb:red615_iec_firmwareabb:ref615_ansiabb:ref615_ansi_firmwareabb:ref615_iecabb:ref615_iec_firmwareabb:ref615rabb:ref615r_firmwareabb:relion_611abb:relion_611_firmwareabb:relion_615_ansiabb:relion_615_ansi_firmwareabb:relion_615_cnabb:relion_615_cn_firmwareabb:relion_615_iecabb:relion_615_iec_firmwareabb:relion_620_ansiabb:relion_620_ansi_firmwareabb:relion_620_cnabb:relion_620_cn_firmwareabb:relion_620_iecabb:relion_620_iec_firmwareabb:rer615abb:rer615_firmwareabb:rer620abb:rer620_firmwareabb:rex640_pcl1abb:rex640_pcl1_firmwareabb:rex640_pcl2abb:rex640_pcl2_firmwareabb:rex640_pcl3abb:rex640_pcl3_firmwareabb:smu615abb:smu615_firmware

Debilidades (CWE)

CWE-665CWE-665

Referencias

https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch(cybersecurity@ch.abb.com)

https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.