2024-08-21 00:00:35 +00:00
{
2024-10-25 17:00:32 +00:00
"data_version" : "4.0" ,
2024-08-21 00:00:35 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2024-8036" ,
2024-10-25 17:00:32 +00:00
"ASSIGNER" : "cybersecurity@ch.abb.com" ,
"STATE" : "PUBLIC"
2024-08-21 00:00:35 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2024-10-25 17:00:32 +00:00
"value" : "ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-347 Improper Verification of Cryptographic Signature" ,
"cweId" : "CWE-347"
}
]
}
]
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "ABB" ,
"product" : {
"product_data" : [
{
"product_name" : "Relion Protection Relays RE_611 IEC" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.0.4"
} ,
{
"version_affected" : "<=" ,
"version_name" : "2.0.0" ,
"version_value" : "2.0.4"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays REF615 IEC" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.2.0"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays REF615 ANSI" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.1.0"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays REX615" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "PCL1"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays REX610" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "1.1.1"
} ,
{
"version_affected" : "=" ,
"version_value" : "1.2.0"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays REX640" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.0.8"
} ,
{
"version_affected" : "<=" ,
"version_name" : "1.1.0" ,
"version_value" : "1.1.6"
} ,
{
"version_affected" : "<=" ,
"version_name" : "1.2.0" ,
"version_value" : "1.2.3"
} ,
{
"version_affected" : "<=" ,
"version_name" : "1.3.0" ,
"version_value" : "1.3.4"
}
]
}
} ,
{
"product_name" : "Substation Merging Unit SMU615" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.0.3"
}
]
}
} ,
{
"product_name" : "Smart Substation Control and Protection SSC600" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "1.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "1.0 FP1"
} ,
{
"version_affected" : "=" ,
"version_value" : "1.0 FP2"
} ,
{
"version_affected" : "=" ,
"version_value" : "1.0 FP3"
} ,
{
"version_affected" : "=" ,
"version_value" : "1.0 FP4"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays REF615R ANSI" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "4.0.0" ,
"version_value" : "4.1.2"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays RED615 IEC" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.1.5"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays 615 series IEC" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "2.0.0" ,
"version_value" : "2.0.9"
} ,
{
"version_affected" : "<=" ,
"version_name" : "3.0.0" ,
"version_value" : "3.0.10"
} ,
{
"version_affected" : "<=" ,
"version_name" : "4.0.0" ,
"version_value" : "4.0.8"
} ,
{
"version_affected" : "<=" ,
"version_name" : "4.1.9" ,
"version_value" : "4.1.10"
} ,
{
"version_affected" : "<=" ,
"version_name" : "5.0.0" ,
"version_value" : "5.0.17"
} ,
{
"version_affected" : "<=" ,
"version_name" : "5.1.0" ,
"version_value" : "5.1.24"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays 615 series CN" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "2.0.0" ,
"version_value" : "2.0.9"
} ,
{
"version_affected" : "<=" ,
"version_name" : "3.0.0" ,
"version_value" : "3..0.7"
} ,
{
"version_affected" : "<=" ,
"version_name" : "3.1.0" ,
"version_value" : "3.1.10"
} ,
{
"version_affected" : "<=" ,
"version_name" : "4.1.0" ,
"version_value" : "4.1.9"
} ,
{
"version_affected" : "<=" ,
"version_name" : "5.1.0" ,
"version_value" : "5.1.4"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays 615 series ANSI" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "2.0.0" ,
"version_value" : "2.0.9"
} ,
{
"version_affected" : "<=" ,
"version_name" : "4.0.0" ,
"version_value" : "4.0.5"
} ,
{
"version_affected" : "<=" ,
"version_name" : "4.1.0" ,
"version_value" : "4.1.1"
} ,
{
"version_affected" : "<=" ,
"version_name" : "4.2.0" ,
"version_value" : "4.2.3"
} ,
{
"version_affected" : "<=" ,
"version_name" : "5.1.0" ,
"version_value" : "5.1.3"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays RER615" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.1.4"
} ,
{
"version_affected" : "<=" ,
"version_name" : "2.0.0" ,
"version_value" : "2.0.9"
}
]
}
} ,
{
"product_name" : "Relion Protection Relays REC615" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.1.4"
} ,
{
"version_affected" : "<=" ,
"version_name" : "2.0.0" ,
"version_value" : "2.0.9"
}
]
}
} ,
{
"product_name" : "RBX615" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "2.0.0"
}
]
}
} ,
{
"product_name" : "RER620 ANSI" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.3"
}
]
}
} ,
{
"product_name" : "620 Series IEC/CN" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "2.0.0" ,
"version_value" : "2.0.13"
} ,
{
"version_affected" : "<=" ,
"version_name" : "2.1.0" ,
"version_value" : "2.1.16"
}
]
}
} ,
{
"product_name" : "RE_630" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.1.0" ,
"version_value" : "1.1.0 C5"
} ,
{
"version_affected" : "<=" ,
"version_name" : "1.2.0" ,
"version_value" : "1.2.0 B8"
} ,
{
"version_affected" : "<=" ,
"version_name" : "1.3.0" ,
"version_value" : "1.3.0 B1"
}
]
}
} ,
{
"product_name" : "RIO600" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.0.0" ,
"version_value" : "1.8.8"
}
]
}
} ,
{
"product_name" : "COM600" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "3.3"
} ,
{
"version_affected" : "=" ,
"version_value" : "3.4"
} ,
{
"version_affected" : "=" ,
"version_value" : "3.5"
} ,
{
"version_affected" : "=" ,
"version_value" : "4.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "4.1"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.1"
}
]
}
} ,
{
"product_name" : "SPA ZC-400" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "Exx"
} ,
{
"version_affected" : "=" ,
"version_value" : "Mxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "Sxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "xMx"
} ,
{
"version_affected" : "=" ,
"version_value" : "Exxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "Mxxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "Sxxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "xMxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "xxxC"
}
]
}
} ,
{
"product_name" : "COM600F ANSI" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "4.1"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.0"
}
]
}
} ,
{
"product_name" : "SPA ZC-402" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "Exxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "Mxxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "Sxxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "xMxx"
} ,
{
"version_affected" : "=" ,
"version_value" : "xxxC"
}
]
}
} ,
{
"product_name" : "REF542plus" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "R1.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "R1.1"
} ,
{
"version_affected" : "=" ,
"version_value" : "R2.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "R2.5"
} ,
{
"version_affected" : "=" ,
"version_value" : "R2.5 ATEX"
} ,
{
"version_affected" : "=" ,
"version_value" : "R2.5 SP3"
} ,
{
"version_affected" : "=" ,
"version_value" : "R2.6"
} ,
{
"version_affected" : "=" ,
"version_value" : "R3.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "R3.0 SP1"
} ,
{
"version_affected" : "=" ,
"version_value" : "R3.0 SP3"
}
]
}
} ,
{
"product_name" : "SUE 3000" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "2.6 V4F07x"
} ,
{
"version_affected" : "=" ,
"version_value" : "3.0FP1 V4F11x"
} ,
{
"version_affected" : "=" ,
"version_value" : "V4D02x"
} ,
{
"version_affected" : "=" ,
"version_value" : "V4E0xx"
}
]
}
} ,
{
"product_name" : "ARG600/ARP600/ARR600/ARC600 single SIM" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "3.x.x" ,
"version_value" : "3.4.13"
}
]
}
} ,
{
"product_name" : "ARG600/ARP600 dual SIM" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "2.x.x" ,
"version_value" : "3.4.13"
}
]
}
} ,
{
"product_name" : "ARM600" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "4.x.x" ,
"version_value" : "5.0.3"
}
]
}
} ,
{
"product_name" : "REC601/RER601" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.1" ,
"version_value" : "1.2"
}
]
}
} ,
{
"product_name" : "REC603/RER603" ,
"version" : {
"version_data" : [
{
"version_affected" : "<=" ,
"version_name" : "1.1" ,
"version_value" : "1.2"
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://search.abb.com/library/Download.aspx?DocumentID=2NGA001911&LanguageCode=en&DocumentPartId=&Action=Launch" ,
"refsource" : "MISC" ,
"name" : "https://search.abb.com/library/Download.aspx?DocumentID=2NGA001911&LanguageCode=en&DocumentPartId=&Action=Launch"
}
]
} ,
"generator" : {
"engine" : "Vulnogram 0.2.0"
} ,
"source" : {
"discovery" : "UNKNOWN"
} ,
"work_around" : [
{
"lang" : "en" ,
"supportingMedia" : [
{
"base64" : false ,
"type" : "text/html" ,
"value" : "Please follow the guidelines in the following Product Advisory Note to improve the system security:\n<br>Guidelines to Prevent Unauthorized Modifications of Firmware and Configuration, ABB Digital\nSubstation Products (<a target=\"_blank\" rel=\"nofollow\" href=\"https://search.abb.com/library/Download.aspx?DocumentID=2NGA002288&LanguageCode=en&DocumentPartId=&Action=Launch\">https://search.abb.com/library/Download.aspx?DocumentID=2NGA002288&LanguageCode=en&DocumentP...</a>)<br>"
}
] ,
"value" : "Please follow the guidelines in the following Product Advisory Note to improve the system security:\n\nGuidelines to Prevent Unauthorized Modifications of Firmware and Configuration, ABB Digital\nSubstation Products ( https://search.abb.com/library/Download.aspx?DocumentID=2NGA002288&LanguageCode=en&DocumentP... https://search.abb.com/library/Download.aspx )"
}
] ,
"credits" : [
{
"lang" : "en" ,
"value" : "ABB thanks Jos Wetzels from Midnight Blue (midnightblue.nl) for helping to identify the vulnerabilities and protecting our customers."
}
] ,
"impact" : {
"cvss" : [
{
"attackComplexity" : "HIGH" ,
"attackVector" : "ADJACENT_NETWORK" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 5.9 ,
"baseSeverity" : "MEDIUM" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "HIGH" ,
"privilegesRequired" : "HIGH" ,
"scope" : "UNCHANGED" ,
"userInteraction" : "REQUIRED" ,
"vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H" ,
"version" : "3.1"
2024-08-21 00:00:35 +00:00
}
]
}
}
