CVE-2021-22283

MMS File Transfer Vulnerability impact on Distribution Automation products

State: Published
Severity: 6.2 Medium
Published: Feb 28, 2023
Updated: Mar 7, 2025
Reserved: Jan 5, 2021

Description

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	ABB

Weaknesses

CWE-665 Improper Initialization

Affected Products

Product	Versions
Relion protection relays - 611 seriesABB	1.0.0 to before 2.0.3Affected
Relion protection relays - 615 series IEC 4.0 FP1ABB	4.1.0 to before 4.1.9Affected
Relion protection relays - 615 series CN 4.0 FP1ABB	4.1.0 to before 4.1.8Affected
Relion protection relays - 615 series IEC 5.0ABB	5.0.0 to before 5.0.12Affected
Relion protection relays - 615 series IEC 5.0 FP1ABB	5.1.0 to before 5.1.20Affected
Relion protection relays - 620 series IEC/CN 2.0ABB	2.0.0 to before 2.0.11Affected
Relion protection relays - 620 series IEC/CN 2.0 FP1ABB	2.1.0 to before 2.1.15Affected
Relion protection relays - REX640 PCL1ABB	1.0.0 to before 1.0.8Affected
Relion protection relays - REX640 PCL2ABB	1.1.0 to before 1.1.4Affected
Relion protection relays - REX640 PCL3ABB	1.2.0 to before 1.2.1Affected
Relion protection relays - RER615ABB	2.0.0 to before 2.0.3Affected
Remote Monitoring and Control - REC615ABB	1.0.0 to before 2.0.3Affected
Merging Unit- SMU615ABB	1.0.0 to before 1.0.2Affected

References

https://search.abb.com/library/Download.aspx?DocumentID=2NGA001147&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.