ICSA-19-330-02

icsaUScisa_csaf_ot

ABB Relion 650 and 670 Series

Advisory ansehen veröffentlicht 2019-11-26

Successful exploitation of this vulnerability may allow an attacker to reboot the device, causing a denial of service.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-18247UShigh7.5—
An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior) to reb…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationRelion 650 series

    ABB has not identified any workaround; however, firewall rules could be set to block incoming traffic to Port 7001/TCP that originate from outside the network.

  • MitigationRelion 670 series

    ABB has not identified any workaround; however, firewall rules could be set to block incoming traffic to Port 7001/TCP that originate from outside the network.

  • BehobenRelion 650 series

    In the Relion 650 series Version 1.3, the SPA protocol over TCP/IP could be disabled if it is not in use.

  • BehobenRelion 670 series

    In the Relion 650 series Version 1.3, the SPA protocol over TCP/IP could be disabled if it is not in use.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan