Hitachi Energy Relion 670/650/SAM600-IO

1. EXECUTIVE SUMMARY CVSS v3 8.1 Vendor: Hitachi Energy Equipment: Relion 670/650/SAM600-IO Vulnerability: Insecure Default Initialization of Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could hijack existing TCP sessions to inject packets of their choosing or cause...

CVE-2021-27196

CVE-2021-27196 affects Hitachi Energy Relion 670/650 series and related IEC 61850 interfaces. The issue is caused by improper input validation that allows an attacker with IEC 61850 network access to trigger a reboot, rendering affected devices inoperable for about 60 seconds. Affected products a...

PT-2021-17315 · Hitachi Abb Power Grids · Msm +9

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids Relion 670 Series versions 1.1 through 2.2.3 Hitachi ABB Power Grids Relion 670/650 Series version 2.2.0 Hitachi ABB Power Grids Relion 670/650/SAM600-IO version 2.2.1 Hitachi ABB Power Grids Relion 650 versions 1.1...

ABB Relion 输入验证错误漏洞

The ABB Relion 670 Series is a transmission protection control device from ABB Switzerland. The Relion 670, 650, and SAM600-IO; REB500; RTU500; FOX615 TEGO1 contains a security vulnerability that can be exploited by an attacker to force a device reboot, rendering the device inoperable for...

Hitachi Energy Relion 670, 650 and SAM600-IO

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Relion 670, 650, and SAM600-IO Vulnerabilities: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

CVE-2021-27196

Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 TEGO1, MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce th...

Abb Relion Improper Input Validation

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service. File data ot500358.nasl...

Abb Relion Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory. File data ot500359.nasl...

CVE-2019-18253

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory...

CVE-2019-18247

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

CVE-2019-18253

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory...

CVE-2019-18247

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

Directory traversal

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory...

Denial of service

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

CVE-2019-18253

The CVE-2019-18253 issue affects ABB Relion 670 Series protection and control devices (versions including 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1 and prior) and is an improper limitation of a pathname to a restricted directory (path traversal). Exploitation could allow reading or dele...

CVE-2019-18253

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory...

CVE-2019-18247

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

CVE-2019-18247

CVE-2019-18247 affects ABB Relion 650/670 Series due to improper input validation. ABB Relion 650 series versions 1.3.0.5 and prior; Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior may reboot when processing a specially crafted message, causing a denial of service. Public sources...

ABB Relion 670 Series Path Traversal Vulnerability

The ABB Relion 670 Series is a transmission protection control device from ABB Switzerland. A path traversal vulnerability exists in the ABB Relion 670 Series, which can be exploited by an attacker to read and delete files on the device...

PT-2019-15297 · Ge · Relion 670 Series +1

Name of the Vulnerable Software and Affected Versions: Relion 650 series versions 1.3.0.5 and prior Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior Description: An attacker may use a specially crafted message to force the device to reboot, which could cause a denial of service...