ABB Relion 650 Series OpenSSL Vulnerability (Update A)

Vulnerabilities 1

• High 7.5
  CVE-2014-0160 Exploited Public exploit EPSS 100%

  The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension pack…

  openssl Debian
  Apr 7, 2014

  KEV May 4, 2022

Revision history

1. 2025-06-09 #2

   Advisory converted into a CSAF

2. 2014-02-06 #1

   Initial Publication

References

• ICS Advisory ICSA-14-126-01A - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-14-126-01a
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014