CVE-2021-22283 : Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.

Published 2023-02-28 05:15:12

Updated 2023-03-13 16:07:24

Source Asea Brown Boveri Ltd. (ABB)

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-22283

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 7 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-22283

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.2	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.5	3.6	Asea Brown Boveri Ltd. (ABB)
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-22283

CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

Assigned by:

cybersecurity@ch.abb.com (Secondary)
nvd@nist.gov (Primary)

Products affected by CVE-2021-22283

ABB » Rex640 Pcl1 Firmware
Versions before (<) 1.0.8
cpe:2.3:o:abb:rex640_pcl1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Rex640 Pcl1 » Version: N/A
ABB » Rex640 Pcl2 Firmware
Versions before (<) 1.1.4
cpe:2.3:o:abb:rex640_pcl2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Rex640 Pcl2 » Version: N/A
ABB » Rex640 Pcl3 Firmware
Versions before (<) 1.2.1
cpe:2.3:o:abb:rex640_pcl3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Rex640 Pcl3 » Version: N/A
ABB » Smu615 Firmware
Versions before (<) 1.0.2
cpe:2.3:o:abb:smu615_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Smu615 » Version: N/A
ABB » Rec615 Firmware
Versions before (<) 2.0.3
cpe:2.3:o:abb:rec615_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Rec615 » Version: N/A
ABB » Rer615 Firmware
Versions before (<) 2.0.3
cpe:2.3:o:abb:rer615_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Rer615 » Version: N/A
ABB » Evd4 Firmware
cpe:2.3:o:abb:evd4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Evd4 » Version: N/A
ABB » Ref615r Firmware
cpe:2.3:o:abb:ref615r_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Ref615r » Version: N/A
ABB » Rer620 Firmware
cpe:2.3:o:abb:rer620_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Rer620 » Version: N/A
ABB » Relion 611 Firmware
Versions before (<) 2.0.3
cpe:2.3:o:abb:relion_611_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 611 » Version: N/A
ABB » Ref615 Iec Firmware
cpe:2.3:o:abb:ref615_iec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Ref615 Iec » Version: 1.0
ABB » Ref615 Ansi Firmware
cpe:2.3:o:abb:ref615_ansi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Ref615 Ansi » Version: 1.0
ABB » Red615 Iec Firmware
cpe:2.3:o:abb:red615_iec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Red615 Iec » Version: 1.1
ABB » Relion 615 Iec Firmware
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 615 Iec » Version: 2.0
When used together with: ABB » Relion 615 Iec » Version: 3.0
When used together with: ABB » Relion 615 Iec » Version: 4.0
ABB » Relion 615 Iec Firmware
Versions before (<) 4.1.9
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 615 Iec » Version: 4.0 Update FP1
ABB » Relion 615 Iec Firmware
Versions before (<) 5.1.20
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 615 Iec » Version: 5.0 Update FP1
ABB » Relion 615 Iec Firmware
Versions before (<) 5.0.12
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 615 Iec » Version: 5.0
ABB » Relion 615 Cn Firmware
Versions before (<) 4.1.8
cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 615 Cn » Version: 4.0 Update FP1
ABB » Relion 615 Cn Firmware
cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 615 Cn » Version: 2.0
When used together with: ABB » Relion 615 Cn » Version: 3.0
When used together with: ABB » Relion 615 Cn » Version: 3.1
When used together with: ABB » Relion 615 Cn » Version: 4.0
When used together with: ABB » Relion 615 Cn » Version: 5.0 Update FP1
ABB » Relion 615 Ansi Firmware
cpe:2.3:o:abb:relion_615_ansi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 615 Ansi » Version: 2.0
When used together with: ABB » Relion 615 Ansi » Version: 4.0
When used together with: ABB » Relion 615 Ansi » Version: 4.0 Update FP1
When used together with: ABB » Relion 615 Ansi » Version: 4.0 Update FP2
When used together with: ABB » Relion 615 Ansi » Version: 5.0 Update FP1
ABB » Relion 620 Iec Firmware
Versions before (<) 2.1.15
cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 620 Iec » Version: 2.0 Update FP1
ABB » Relion 620 Iec Firmware
Versions before (<) 2.0.11
cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 620 Iec » Version: 2.0
ABB » Relion 620 Cn Firmware
Versions before (<) 2.0.11
cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 620 Cn » Version: 2.0
ABB » Relion 620 Cn Firmware
Versions before (<) 2.1.15
cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 620 Cn » Version: 2.0 Update FP1
ABB » Relion 620 Ansi Firmware
cpe:2.3:o:abb:relion_620_ansi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ABB » Relion 620 Ansi » Version: N/A

Vulnerability Details : CVE-2021-22283

Exploit prediction scoring system (EPSS) score for CVE-2021-22283

CVSS scores for CVE-2021-22283

CWE ids for CVE-2021-22283

References for CVE-2021-22283

Products affected by CVE-2021-22283