CVE-2019-18253

The CVE-2019-18253 issue affects ABB Relion 670 Series protection and control devices (versions including 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1 and prior) and is an improper limitation of a pathname to a restricted directory (path traversal). Exploitation could allow reading or dele...

CVE-2019-18247

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

CVE-2019-18247

CVE-2019-18247 affects ABB Relion 650/670 Series due to improper input validation. ABB Relion 650 series versions 1.3.0.5 and prior; Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior may reboot when processing a specially crafted message, causing a denial of service. Public sources...

ABB Relion 670 Series Path Traversal Vulnerability

The ABB Relion 670 Series is a transmission protection control device from ABB Switzerland. A path traversal vulnerability exists in the ABB Relion 670 Series, which can be exploited by an attacker to read and delete files on the device...

CVE-2019-18247: Improper Input Validation

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

CVE-2019-18253: Improper Limitation of a Pathname to a Restricted Directory

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory...

PT-2019-15297 · Ge · Relion 670 Series +1

Name of the Vulnerable Software and Affected Versions: Relion 650 series versions 1.3.0.5 and prior Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior Description: An attacker may use a specially crafted message to force the device to reboot, which could cause a denial of service...

ABB Relion 650 and 670 Series Input Validation Error Vulnerability

The ABB Relion 670 Series and ABB Relion 650 Series are both transmission protection control devices from ABB Switzerland. An input validation error vulnerability exists in the ABB Relion 650 and 670 Series, which can be exploited by an attacker to reboot the device, resulting in a denial of...

ABB Relion 650 and 670 Series CVE-2019-18247 Denial Of Service Vulnerability

Description ABB Relion 650 and 670 Series are prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a device to reboot, denying service to legitimate users. The following versions of ABB Relion series are vulnerable: ABB Relion 650 series versions 1.3.0.5 and prior...

ABB Relion 650 and 670 Series

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: Relion 650 and 670 Series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to reboot the device,...

ABB Relion 670 Series

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: Relion 670 Series Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to read and delete files on the device. 3...

Abb Relion Improper Input Validation

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message. File data ot500307.nasl...

ABB Relion 670 Series CVE-2019-18253 Directory Traversal Vulnerability

Description ABB Relion 670 Series is prone to a directory-traversal vulnerability. Remote attackers may use a specially crafted request with directory-traversal sequences '../' to retrieve sensitive information. This may aid in further attacks. The following ABB products are affected: Relion 670...

ABB Relion 630 Denial of Service Vulnerability

The ABB Relion 630 is a relay device for substation automation protection and control from ABB Switzerland. A security vulnerability exists in the ABB Relion 630 version 1.1 before 1.1.0.C0, version 1.2 before 1.2.0.B3, and version 1.3 before 1.3.0.A6. A remote attacker could exploit this...

Design/Logic Flaw

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message...

CVE-2018-20720

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message...

CVE-2018-20720

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message...

CVE-2018-20720

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message...

CVE-2018-20720

Summary (CVE-2018-20720) Affected product: ABB Relion 630 devices. Vulnerable versions: 1.1 prior to 1.1.0.C0; 1.2 prior to 1.2.0.B3; 1.3 prior to 1.3.0.A6. Root cause / nature (as stated): Remote attackers can cause a denial of service (device reboot) via a reboot command in an SPA message. Impa...

CVE-2018-20720: Improper Input Validation

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message...