CVE-2021-27196
mediumpriority · track · 31EPSS 0.016 · 75 %ileEUUSEPSS · scored 2026-10-27
Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce the attack, as well as the IP addresses of the different IEC 61850 access points (of IEDs/products), to force the device to reboot, which renders the device inoperable for approximately 60 seconds. This vulnerability affects only products with IEC 61850 interfaces. This issue affects: Hitachi ABB Power Grids Relion 670 Series 1.1; 1.2.3 versions prior to 1.2.3.20; 2.0 versions prior to 2.0.0.13; 2.1; 2.2.2 versions prior to 2.2.2.3; 2.2.3 versions prior to 2.2.3.2. Hitachi ABB Power Grids Relion 670/650 Series 2.2.0 versions prior to 2.2.0.13. Hitachi ABB Power Grids Relion 670/650/SAM600-IO 2.2.1 versions prior to 2.2.1.6. Hitachi ABB Power Grids Relion 650 1.1; 1.2; 1.3 versions prior to 1.3.0.7. Hitachi ABB Power Grids REB500 7.3; 7.4; 7.5; 7.6; 8.2; 8.3. Hitachi ABB Power Grids RTU500 Series 7.x version 7.x and prior versions; 8.x version 8.x and prior versions; 9.x version 9.x and prior versions; 10.x version 10.x and prior versions; 11.x version 11.x and prior versions; 12.x version 12.x and prior versions. Hitachi ABB Power Grids FOX615 (TEGO1) R1D02 version R1D02 and prior versions. Hitachi ABB Power Grids MSM 2.1.0 versions prior to 2.1.0. Hitachi ABB Power Grids GMS600 1.3.0 version 1.3.0 and prior versions. Hitachi ABB Power Grids PWC600 1.0 versions prior to 1.0.1.4; 1.1 versions prior to 1.1.0.1.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRelion 650 seriescisa_csaf_ot
Relion 650 series Version 1.1: Planned
- FixedRelion 670 Seriescisa_csaf_ot
Relion 650 series Version 1.1: Planned
- FixedRelion 670/650 Seriescisa_csaf_ot
Relion 650 series Version 1.1: Planned
- FixedRelion 670/650/SAM600-IO Seriescisa_csaf_ot
Relion 650 series Version 1.1: Planned
- MitigationRelion 650 seriescisa_csaf_ot
FOX615 TEGO1 Version R2A16 and later
- MitigationRelion 670 Seriescisa_csaf_ot
FOX615 TEGO1 Version R2A16 and later
- MitigationRelion 670/650 Seriescisa_csaf_ot
FOX615 TEGO1 Version R2A16 and later
- MitigationRelion 670/650/SAM600-IO Seriescisa_csaf_ot
FOX615 TEGO1 Version R2A16 and later
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (38)
Products and version ranges known to be affected.
- hitachienergy fox615 tego1 firmware< r2a16nvdUScpe:2.3:o:hitachienergy:fox615_tego1_firmware:*:*:*:*:*:*:*:*
- hitachienergy modular switchgear monitoring firmware< 2.1.0nvdUScpe:2.3:o:hitachienergy:modular_switchgear_monitoring_firmware:*:*:*:*:*:*:*:*
- hitachienergy pwc600 firmware1.0 → 1.0.1.4nvdUScpe:2.3:o:hitachienergy:pwc600_firmware:*:*:*:*:*:*:*:*
- hitachienergy pwc600 firmware1.1 → 1.1.0.1nvdUScpe:2.3:o:hitachienergy:pwc600_firmware:*:*:*:*:*:*:*:*
- hitachienergy reb500 firmware7.3 → 7.60.19nvdUScpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*
- hitachienergy reb500 firmware8.2 → 8.2.0.5nvdUScpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*
- hitachienergy reb500 firmware8.3 → 8.3.1.0nvdUScpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*
- hitachienergy relion 650 firmware= 1.1nvdUScpe:2.3:o:hitachienergy:relion_650_firmware:*:*:*:*:*:*:*:*
- hitachienergy relion 650 firmware= 1.2nvdUScpe:2.3:o:hitachienergy:relion_650_firmware:*:*:*:*:*:*:*:*
- hitachienergy relion 650 firmware1.3 → 1.3.0.7nvdUScpe:2.3:o:hitachienergy:relion_650_firmware:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-21-096-01Hitachi Energy Relion 670, 650 and SAM600-IO2021-04-06icsa · cisa_csaf_otUS
This updated advisory is a follow-up to the original advisory titled �ICSA-21-096-01 Hitachi ABB Power Grids Multiple Products� published April 6, 2021 on the ICS webpage at cisa.gov.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (24)
External citations — patches, advisories, analysis.
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8932&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8934&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8936&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8937&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A9057&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A9058&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A9059&LanguageCode=en&DocumentPartId=&Action=Launchcnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-096-01cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan