CVE-2021-22283

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-22283
Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:abb:smu615_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:smu615:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:abb:rec615_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rec615:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:abb:rer615_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rer615:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:abb:evd4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:evd4:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:abb:ref615r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615r:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:abb:rex640_pcl3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rex640_pcl3:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:abb:rex640_pcl2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rex640_pcl2:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:abb:rex640_pcl1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rex640_pcl1:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:abb:rer620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rer620:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:abb:relion_611_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_611:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:abb:ref615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615_iec:1.0:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:abb:ref615_ansi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615_ansi:1.0:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:abb:ref615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615_iec:1.1:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:abb:red615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:red615_iec:1.1:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:abb:ref615_ansi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615_ansi:1.1:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:abb:relion_615_iec:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:3.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:4.0:-:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:abb:relion_615_cn:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:3.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:3.1:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:4.0:-:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:5.0:fp1:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:abb:relion_615_ansi_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:abb:relion_615_ansi:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:4.0:-:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:4.0:fp1:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:4.0:fp2:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:5.0:fp1:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:4.0:fp1:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:4.0:fp1:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:5.0:-:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:5.0:fp1:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_iec:2.0:-:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_cn:2.0:-:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:abb:relion_620_ansi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_ansi:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_iec:2.0:fp1:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_cn:2.0:fp1:*:*:*:*:*:*
History

13 Mar 2023, 16:07

Type Values Removed Values Added
References (MISC) https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch - (MISC) https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory
CWE CWE-665
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:abb:ref615r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:rex640_pcl2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:relion_611_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rer620:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:5.0:fp1:*:*:*:*:*:*
cpe:2.3:h:abb:rer615:-:*:*:*:*:*:*:*
cpe:2.3:o:abb:red615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:2.0:*:*:*:*:*:*:*
cpe:2.3:o:abb:smu615_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rex640_pcl3:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:4.0:-:*:*:*:*:*:*
cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_iec:2.0:-:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_ansi:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:2.0:*:*:*:*:*:*:*
cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:4.0:fp2:*:*:*:*:*:*
cpe:2.3:h:abb:relion_611:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615_ansi:1.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_iec:2.0:fp1:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:5.0:fp1:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_cn:2.0:-:*:*:*:*:*:*
cpe:2.3:o:abb:evd4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:rex640_pcl3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rex640_pcl1:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:5.0:-:*:*:*:*:*:*
cpe:2.3:o:abb:rex640_pcl1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:rer620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:4.0:-:*:*:*:*:*:*
cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:4.0:fp1:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:4.0:fp1:*:*:*:*:*:*
cpe:2.3:h:abb:smu615:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_ansi:5.0:fp1:*:*:*:*:*:*
cpe:2.3:o:abb:ref615_iec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:rec615:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:3.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_iec:3.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615_ansi:1.1:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:4.0:-:*:*:*:*:*:*
cpe:2.3:o:abb:ref615_ansi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:rer615_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615r:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:evd4:-:*:*:*:*:*:*:*
cpe:2.3:o:abb:rec615_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:4.0:fp1:*:*:*:*:*:*
cpe:2.3:o:abb:relion_620_ansi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:ref615_iec:1.1:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:2.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_615_cn:3.1:*:*:*:*:*:*:*
cpe:2.3:h:abb:relion_620_cn:2.0:fp1:*:*:*:*:*:*
cpe:2.3:h:abb:ref615_iec:1.0:*:*:*:*:*:*:*
cpe:2.3:h:abb:rex640_pcl2:-:*:*:*:*:*:*:*
cpe:2.3:o:abb:relion_615_ansi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:red615_iec:1.1:*:*:*:*:*:*:*

28 Feb 2023, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-02-28 05:15

Updated : 2024-02-04 23:14

NVD link : CVE-2021-22283

Mitre link : CVE-2021-22283

CVE.ORG link : CVE-2021-22283

JSON object : View

Products Affected

abb

  • relion_620_iec
  • relion_615_cn_firmware
  • rec615_firmware
  • red615_iec
  • relion_620_iec_firmware
  • rer620_firmware
  • red615_iec_firmware
  • smu615
  • evd4
  • ref615_iec_firmware
  • rex640_pcl3_firmware
  • relion_620_cn_firmware
  • relion_620_cn
  • relion_615_cn
  • relion_615_ansi
  • rec615
  • rex640_pcl1
  • relion_620_ansi_firmware
  • rex640_pcl2
  • evd4_firmware
  • relion_620_ansi
  • ref615_ansi_firmware
  • relion_615_iec_firmware
  • ref615_ansi
  • relion_615_iec
  • ref615r_firmware
  • relion_611_firmware
  • relion_611
  • rer620
  • rex640_pcl3
  • rer615
  • ref615r
  • rex640_pcl1_firmware
  • ref615_iec
  • relion_615_ansi_firmware
  • rer615_firmware
  • smu615_firmware
  • rex640_pcl2_firmware
CWE
CWE-665

Improper Initialization