Description
ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ABB | Relion Protection Relays RE_611 IEC | 1.0.0 – ≤ 1.0.4, 2.0.0 – ≤ 2.0.4 | — |
| ABB | Relion Protection Relays REF615 IEC | 1.0.0 – ≤ 1.2.0 | — |
| ABB | Relion Protection Relays REF615 ANSI | 1.0.0 – ≤ 1.1.0 | — |
| ABB | Relion Protection Relays REX615 | PCL1 | — |
| ABB | Relion Protection Relays REX610 | 1.1.1, 1.2.0 | — |
| ABB | Relion Protection Relays REX640 | 1.0.0 – ≤ 1.0.8, 1.1.0 – ≤ 1.1.6, 1.2.0 – ≤ 1.2.3, 1.3.0 – ≤ 1.3.4 | — |
| ABB | Substation Merging Unit SMU615 | 1.0.0 – ≤ 1.0.3 | — |
| ABB | Smart Substation Control and Protection SSC600 | 1.0, 1.0 FP1, 1.0 FP2, 1.0 FP3, 1.0 FP4 | — |
| ABB | Relion Protection Relays REF615R ANSI | 4.0.0 – ≤ 4.1.2 | — |
| ABB | Relion Protection Relays RED615 IEC | 1.0.0 – ≤ 1.1.5 | — |
| ABB | Relion Protection Relays 615 series IEC | 2.0.0 – ≤ 2.0.9, 3.0.0 – ≤ 3.0.10, 4.0.0 – ≤ 4.0.8, 4.1.9 – ≤ 4.1.10, 5.0.0 – ≤ 5.0.17, 5.1.0 – ≤ 5.1.24 | — |
| ABB | Relion Protection Relays 615 series CN | 2.0.0 – ≤ 2.0.9, 3.0.0 – ≤ 3..0.7, 3.1.0 – ≤ 3.1.10, 4.1.0 – ≤ 4.1.9, 5.1.0 – ≤ 5.1.4 | — |
| ABB | Relion Protection Relays 615 series ANSI | 2.0.0 – ≤ 2.0.9, 4.0.0 – ≤ 4.0.5, 4.1.0 – ≤ 4.1.1, 4.2.0 – ≤ 4.2.3, 5.1.0 – ≤ 5.1.3 | — |
| ABB | Relion Protection Relays RER615 | 1.0.0 – ≤ 1.1.4, 2.0.0 – ≤ 2.0.9 | — |
| ABB | Relion Protection Relays REC615 | 1.0.0 – ≤ 1.1.4, 2.0.0 – ≤ 2.0.9 | — |
| ABB | RBX615 | 1.0.0 – ≤ 2.0.0 | — |
| ABB | RER620 ANSI | 1.0.0 – ≤ 1.3 | — |
| ABB | 620 Series IEC/CN | 2.0.0 – ≤ 2.0.13, 2.1.0 – ≤ 2.1.16 | — |
| ABB | RE_630 | 1.1.0 – ≤ 1.1.0 C5, 1.2.0 – ≤ 1.2.0 B8, 1.3.0 – ≤ 1.3.0 B1 | — |
| ABB | RIO600 | 1.0.0 – ≤ 1.8.8 | — |
| ABB | COM600 | 3.3, 3.4, 3.5, 4.0, 4.1, 5.0, 5.1 | — |
| ABB | SPA ZC-400 | Exx, Mxx, Sxx, xMx, Exxx, Mxxx, Sxxx, xMxx, xxxC | — |
| ABB | COM600F ANSI | 4.1, 5.0 | — |
| ABB | SPA ZC-402 | Exxx, Mxxx, Sxxx, xMxx, xxxC | — |
| ABB | REF542plus | R1.0, R1.1, R2.0, R2.5, R2.5 ATEX, R2.5 SP3, R2.6, R3.0, R3.0 SP1, R3.0 SP3 | — |
| ABB | SUE 3000 | 2.6 V4F07x, 3.0FP1 V4F11x, V4D02x, V4E0xx | — |
| ABB | ARG600/ARP600/ARR600/ARC600 single SIM | 3.x.x – ≤ 3.4.13 | — |
| ABB | ARG600/ARP600 dual SIM | 2.x.x – ≤ 3.4.13 | — |
| ABB | ARM600 | 4.x.x – ≤ 5.0.3 | — |
| ABB | REC601/RER601 | 1.1 – ≤ 1.2 | — |
| ABB | REC603/RER603 | 1.1 – ≤ 1.2 | — |
Advisories 1
- WID-SEC-2024-3257 ABB Relion: Schwachstelle ermöglicht Privilegieneskalation und DoS BSI CERT-Bund (WID) · Oct 24, 2024