CVE-2021-27196
mediumPriorität · verfolgen · 31EPSS 0.016 · 75. PerzentilEUUSEPSS · bewertet 2026-10-27
Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce the attack, as well as the IP addresses of the different IEC 61850 access points (of IEDs/products), to force the device to reboot, which renders the device inoperable for approximately 60 seconds. This vulnerability affects only products with IEC 61850 interfaces. This issue affects: Hitachi ABB Power Grids Relion 670 Series 1.1; 1.2.3 versions prior to 1.2.3.20; 2.0 versions prior to 2.0.0.13; 2.1; 2.2.2 versions prior to 2.2.2.3; 2.2.3 versions prior to 2.2.3.2. Hitachi ABB Power Grids Relion 670/650 Series 2.2.0 versions prior to 2.2.0.13. Hitachi ABB Power Grids Relion 670/650/SAM600-IO 2.2.1 versions prior to 2.2.1.6. Hitachi ABB Power Grids Relion 650 1.1; 1.2; 1.3 versions prior to 1.3.0.7. Hitachi ABB Power Grids REB500 7.3; 7.4; 7.5; 7.6; 8.2; 8.3. Hitachi ABB Power Grids RTU500 Series 7.x version 7.x and prior versions; 8.x version 8.x and prior versions; 9.x version 9.x and prior versions; 10.x version 10.x and prior versions; 11.x version 11.x and prior versions; 12.x version 12.x and prior versions. Hitachi ABB Power Grids FOX615 (TEGO1) R1D02 version R1D02 and prior versions. Hitachi ABB Power Grids MSM 2.1.0 versions prior to 2.1.0. Hitachi ABB Power Grids GMS600 1.3.0 version 1.3.0 and prior versions. Hitachi ABB Power Grids PWC600 1.0 versions prior to 1.0.1.4; 1.1 versions prior to 1.1.0.1.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRelion 650 seriescisa_csaf_ot
Relion 650 series Version 1.1: Planned
- BehobenRelion 670 Seriescisa_csaf_ot
Relion 650 series Version 1.1: Planned
- BehobenRelion 670/650 Seriescisa_csaf_ot
Relion 650 series Version 1.1: Planned
- BehobenRelion 670/650/SAM600-IO Seriescisa_csaf_ot
Relion 650 series Version 1.1: Planned
- MitigationRelion 650 seriescisa_csaf_ot
FOX615 TEGO1 Version R2A16 and later
- MitigationRelion 670 Seriescisa_csaf_ot
FOX615 TEGO1 Version R2A16 and later
- MitigationRelion 670/650 Seriescisa_csaf_ot
FOX615 TEGO1 Version R2A16 and later
- MitigationRelion 670/650/SAM600-IO Seriescisa_csaf_ot
FOX615 TEGO1 Version R2A16 and later
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (38)
Betroffene Produkte und Versionsbereiche.
- hitachienergy fox615 tego1 firmware< r2a16nvdUScpe:2.3:o:hitachienergy:fox615_tego1_firmware:*:*:*:*:*:*:*:*
- hitachienergy modular switchgear monitoring firmware< 2.1.0nvdUScpe:2.3:o:hitachienergy:modular_switchgear_monitoring_firmware:*:*:*:*:*:*:*:*
- hitachienergy pwc600 firmware1.0 → 1.0.1.4nvdUScpe:2.3:o:hitachienergy:pwc600_firmware:*:*:*:*:*:*:*:*
- hitachienergy pwc600 firmware1.1 → 1.1.0.1nvdUScpe:2.3:o:hitachienergy:pwc600_firmware:*:*:*:*:*:*:*:*
- hitachienergy reb500 firmware7.3 → 7.60.19nvdUScpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*
- hitachienergy reb500 firmware8.2 → 8.2.0.5nvdUScpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*
- hitachienergy reb500 firmware8.3 → 8.3.1.0nvdUScpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*
- hitachienergy relion 650 firmware= 1.1nvdUScpe:2.3:o:hitachienergy:relion_650_firmware:*:*:*:*:*:*:*:*
- hitachienergy relion 650 firmware= 1.2nvdUScpe:2.3:o:hitachienergy:relion_650_firmware:*:*:*:*:*:*:*:*
- hitachienergy relion 650 firmware1.3 → 1.3.0.7nvdUScpe:2.3:o:hitachienergy:relion_650_firmware:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-21-096-01Hitachi Energy Relion 670, 650 and SAM600-IO2021-04-06icsa · cisa_csaf_otUS
This updated advisory is a follow-up to the original advisory titled �ICSA-21-096-01 Hitachi ABB Power Grids Multiple Products� published April 6, 2021 on the ICS webpage at cisa.gov.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (24)
Externe Belege — Patches, Meldungen, Analysen.
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8932&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8934&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8936&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8937&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A9057&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A9058&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A9059&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-096-01cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan