Vulnerability · Published Feb 28, 2023 · Assigned by ABB
CVE-2021-22283MMS File Transfer Vulnerability impact on Distribution Automation products
Medium 6.2
In plain English
A medium-severity security flaw in Merging Unit- SMU615 from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Official description
Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ABB | Relion protection relays - 611 series | 1.0.0 – before 2.0.3 |
| ABB | Relion protection relays - 615 series IEC 4.0 FP1 | 4.1.0 – before 4.1.9 |
| ABB | Relion protection relays - 615 series CN 4.0 FP1 | 4.1.0 – before 4.1.8 |
| ABB | Relion protection relays - 615 series IEC 5.0 | 5.0.0 – before 5.0.12 |
| ABB | Relion protection relays - 615 series IEC 5.0 FP1 | 5.1.0 – before 5.1.20 |
| ABB | Relion protection relays - 620 series IEC/CN 2.0 | 2.0.0 – before 2.0.11 |
| ABB | Relion protection relays - 620 series IEC/CN 2.0 FP1 | 2.1.0 – before 2.1.15 |
| ABB | Relion protection relays - REX640 PCL1 | 1.0.0 – before 1.0.8 |
| ABB | Relion protection relays - REX640 PCL2 | 1.1.0 – before 1.1.4 |
| ABB | Relion protection relays - REX640 PCL3 | 1.2.0 – before 1.2.1 |
| ABB | Relion protection relays - RER615 | 2.0.0 – before 2.0.3 |
| ABB | Remote Monitoring and Control - REC615 | 1.0.0 – before 2.0.3 |
| ABB | Merging Unit- SMU615 | 1.0.0 – before 1.0.2 |
Weakness: CWE-665 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H