CVE-2021-22283

Published: Feb 28, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.

Affected (25)

Products: Abb: Smu615 Firmware, Rec615 Firmware, Rer615 Firmware, Evd4 Firmware, Ref615r Firmware, Rex640 Pcl3 Firmware, Rex640 Pcl2 Firmware, Rex640 Pcl1 Firmware, Rer620 Firmware, Relion 611 Firmware, Ref615 Iec Firmware, Red615 Iec Firmware, Ref615 Ansi Firmware, Relion 615 Iec Firmware, Relion 615 Cn Firmware, Relion 615 Ansi Firmware, Relion 620 Iec Firmware, Relion 620 Cn Firmware, Relion 620 Ansi Firmware

19 products

Relion 615 Iec Firmware

Relion 615 Cn Firmware

Relion 615 Ansi Firmware

Relion 620 Iec Firmware

Relion 620 Cn Firmware

Relion 620 Ansi Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Smu615 Firmware	Before 1.0.2

Running on/with	Platform Versions
Abb Smu615	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Rec615 Firmware	Before 2.0.3

Running on/with	Platform Versions
Abb Rec615	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Rer615 Firmware	Before 2.0.3

Running on/with	Platform Versions
Abb Rer615	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Evd4 Firmware	All versions

Running on/with	Platform Versions
Abb Evd4	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Ref615r Firmware	All versions

Running on/with	Platform Versions
Abb Ref615r	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Rex640 Pcl3 Firmware	Before 1.2.1

Running on/with	Platform Versions
Abb Rex640 Pcl3	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Rex640 Pcl2 Firmware	Before 1.1.4

Running on/with	Platform Versions
Abb Rex640 Pcl2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Rex640 Pcl1 Firmware	Before 1.0.8

Running on/with	Platform Versions
Abb Rex640 Pcl1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Rer620 Firmware	All versions

Running on/with	Platform Versions
Abb Rer620	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 611 Firmware	Before 2.0.3

Running on/with	Platform Versions
Abb Relion 611	All versions

Configuration K

1 platform

Running on/with	Platform Versions
Abb Ref615 Iec	Version 1.0

Configuration L

1 platform

Running on/with	Platform Versions
Abb Ref615 Ansi	Version 1.0

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Ref615 Iec Firmware	All versions

Running on/with	Platform Versions
Abb Ref615 Iec	Version 1.1

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Red615 Iec Firmware	All versions

Running on/with	Platform Versions
Abb Red615 Iec	Version 1.1

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Ref615 Ansi Firmware	All versions

Running on/with	Platform Versions
Abb Ref615 Ansi	Version 1.1

Configuration P

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Abb Relion 615 Iec Firmware	All versions

Running on/with	Platform Versions
Abb Relion 615 Iec	Version 2.0
Abb Relion 615 Iec	Version 3.0
Abb Relion 615 Iec	Version 4.0

Configuration Q

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Abb Relion 615 Cn Firmware	All versions

Running on/with	Platform Versions
Abb Relion 615 Cn	Version 2.0
Abb Relion 615 Cn	Version 3.0
Abb Relion 615 Cn	Version 3.1
Abb Relion 615 Cn	Version 4.0
Abb Relion 615 Cn	Version 5.0 fp1

Configuration R

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Abb Relion 615 Ansi Firmware	All versions

Running on/with	Platform Versions
Abb Relion 615 Ansi	Version 2.0
Abb Relion 615 Ansi	Version 4.0
Abb Relion 615 Ansi	Version 4.0 fp1
Abb Relion 615 Ansi	Version 4.0 fp2
Abb Relion 615 Ansi	Version 5.0 fp1

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 615 Iec Firmware	Before 4.1.9

Running on/with	Platform Versions
Abb Relion 615 Iec	Version 4.0 fp1

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 615 Cn Firmware	Before 4.1.8

Running on/with	Platform Versions
Abb Relion 615 Cn	Version 4.0 fp1

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 615 Iec Firmware	Before 5.0.12

Running on/with	Platform Versions
Abb Relion 615 Iec	Version 5.0

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 615 Iec Firmware	Before 5.1.20

Running on/with	Platform Versions
Abb Relion 615 Iec	Version 5.0 fp1

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 620 Iec Firmware	Before 2.0.11

Running on/with	Platform Versions
Abb Relion 620 Iec	Version 2.0

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 620 Cn Firmware	Before 2.0.11

Running on/with	Platform Versions
Abb Relion 620 Cn	Version 2.0

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 620 Ansi Firmware	All versions

Running on/with	Platform Versions
Abb Relion 620 Ansi	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 620 Iec Firmware	Before 2.1.15

Running on/with	Platform Versions
Abb Relion 620 Iec	Version 2.0 fp1

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Relion 620 Cn Firmware	Before 2.1.15

Running on/with	Platform Versions
Abb Relion 620 Cn	Version 2.0 fp1

Related CWEs

CWE-665

Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (2)

https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch

Source: cybersecurity@ch.abb.com

Vendor Advisory

https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.