CVE-2021-22283

The CVE-2021-22283 issue is an improper initialization vulnerability in ABB Relion devices, allowing Communication Channel Manipulation and potential DoS when accessed by a crafted MMS client. Affected products and versions (per connected sources): Relion protection relays – 611 series (1.0.0–2.0...

CVE-2023-2876

CVE-2023-2876 affects ABB REX640 PCL1, PCL2 and PCL3 firmware modules. Root cause: cookies set without HttpOnly enable, enabling cross-site scripting (XSS). Affected versions: PCL1 1.0.0–1.0.7; PCL2 1.0.0–1.1.3; PCL3 1.0.0–1.2.0. Impact: Web/OT interfaces may allow cookie exposure and script-base...

CVE-2022-1596

CVE-2022-1596 affects ABB REX640 PCL1/2/3. The vulnerability is described as an Incorrect Permission/Privilege misdistribution that allows an authenticated attacker to access the user database file and potentially take control of an affected system node. Public data includes CVSS v3.1 base score ...