ABB Relion 650 and 670 Series
Successful exploitation of this vulnerability may allow an attacker to reboot the device, causing a denial of service.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-18247US | high7.5 | — | ||
An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior) to reb… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationRelion 650 series
ABB has not identified any workaround; however, firewall rules could be set to block incoming traffic to Port 7001/TCP that originate from outside the network.
- MitigationRelion 670 series
ABB has not identified any workaround; however, firewall rules could be set to block incoming traffic to Port 7001/TCP that originate from outside the network.
- FixedRelion 650 series
In the Relion 650 series Version 1.3, the SPA protocol over TCP/IP could be disabled if it is not in use.
- FixedRelion 670 series
In the Relion 650 series Version 1.3, the SPA protocol over TCP/IP could be disabled if it is not in use.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan