Vulnerability-Lookup

BDU:2026-01946 (CVE-2024-8036)

Vulnerability from fstec – Published: 2026-02-18 – Updated: 2026-02-18 – View on bdu.fstec.ru Exploit publicly available Yes Fixed

Title

Уязвимость микропрограммного обеспечения устройств ABB, связанная с ошибками проверки криптографической подписи, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость микропрограммного обеспечения устройств ABB связана с ошибками проверки криптографической подписи. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Severity

6.2 (Medium) CVSS 2.0


                      
                        AV:A/AC:H/Au:S/C:P/I:C/A:C

5.9 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H

4.6 (Medium) CVSS 4.0


                      
                        CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:N/R:I/V:D/RE:H/U:Amber

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Spoofing

Incidents

Yes

Remediation

Software update

CWE

CWE-347 - Некорректная проверка криптографической подписи

Aliases

CVE-2024-8036

References

2 references

URL
https://www.midnightblue.nl/blog/have-you-tried-turning-it-off-and-on-again-part-1
https://search.abb.com/library/Download.aspx?DocumentID=2NGA001911&LanguageCode…

Impacted products

24 products from 1 vendor

Vendors

ABB

Products

ABB Relion RER620, ABB Relion 611, ABB ARG600, ABB Relion 615, ABB Relion 620, ABB REC615, ABB Relion RER615, ABB Relion REX 610, ABB Relion REX 615, ABB Relion REX 640, ABB SMU615, ABB SSC600, ABB ARC600, ABB ARR600, ABB ARP600, ABB RER601, ABB REC601, ABB REC603, ABB ARM600, ABB ARM600SW, ABB COM600, ABB SPA ZC-400, SPA ZC-402, ABB SUE3000

Versions

- (ABB Relion RER620), - (ABB Relion 611), - (ABB ARG600), - (ABB Relion 615), - (ABB Relion 620), - (ABB REC615), - (ABB Relion RER615), - (ABB Relion REX 610), - (ABB Relion REX 615), - (ABB Relion REX 640), - (ABB SMU615), - (ABB SSC600), - (ABB ARC600), - (ABB ARR600), - (ABB ARP600), - (ABB RER601), - (ABB REC601), - (ABB REC603), - (ABB ARM600), - (ABB ARM600SW), - (ABB COM600), - (ABB SPA ZC-400), - (SPA ZC-402), - (ABB SUE3000)

Product types

ПО программно-аппаратного средства АСУ ТП, Средство АСУ ТП, Network device, Network appliance software, Firmware

Mitigations

Использование рекомендаций производителя: https://search.abb.com/library/Download.aspx?DocumentID=2NGA001911&LanguageCode=en&DocumentPartId=&Action=Launch

JSON

To clipboard

{
  "CVSS 2.0": "AV:A/AC:H/Au:S/C:P/I:C/A:C",
  "CVSS 3.0": "AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H",
  "CVSS 4.0": "AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:N/R:I/V:D/RE:H/U:Amber",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "ABB",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (ABB Relion RER620), - (ABB Relion 611), - (ABB ARG600), - (ABB Relion 615), - (ABB Relion 620), - (ABB REC615), - (ABB Relion RER615), - (ABB Relion REX 610), - (ABB Relion REX 615), - (ABB Relion REX 640), - (ABB SMU615), - (ABB SSC600), - (ABB ARC600), - (ABB ARR600), - (ABB ARP600), - (ABB RER601), - (ABB REC601), - (ABB REC603), - (ABB ARM600), - (ABB ARM600SW), - (ABB COM600), - (ABB SPA ZC-400), - (SPA ZC-402), - (ABB SUE3000)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://search.abb.com/library/Download.aspx?DocumentID=2NGA001911\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "21.10.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "18.02.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "18.02.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-01946",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-8036",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "ABB Relion RER620, ABB Relion 611, ABB ARG600, ABB Relion 615, ABB Relion 620, ABB REC615, ABB Relion RER615, ABB Relion REX 610, ABB Relion REX 615, ABB Relion REX 640, ABB SMU615, ABB SSC600, ABB ARC600, ABB ARR600, ABB ARP600, ABB RER601, ABB REC601, ABB REC603, ABB ARM600, ABB ARM600SW, ABB COM600, ABB SPA ZC-400, SPA ZC-402, ABB SUE3000",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 ABB, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (CWE-347)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 ABB \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.midnightblue.nl/blog/have-you-tried-turning-it-off-and-on-again-part-1\nhttps://search.abb.com/library/Download.aspx?DocumentID=2NGA001911\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u0421\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-347",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,2)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,9)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)"
}

CVE-2024-8036 (GCVE-0-2024-8036)

Vulnerability from cvelistv5 – Published: 2024-10-25 16:57 – Updated: 2024-10-30 17:20

Title

Unauthorized Modifications of Firmware and Configuration

Summary

ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H

4.6 (Medium)


                        
                          CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:N/R:I/V:D/RE:H/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-25 18:01 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

ABB icscert root

References

1 reference

URL	Tags
https://search.abb.com/library/Download.aspx?Docu…

Impacted products

31 products

Vendor	Product	Version
ABB	Relion Protection Relays RE_611 IEC	Affected: 1.0.0 , ≤ 1.0.4 (custom) Affected: 2.0.0 , ≤ 2.0.4 (custom)
ABB	Relion Protection Relays REF615 IEC	Affected: 1.0.0 , ≤ 1.2.0 (custom)
ABB	Relion Protection Relays REF615 ANSI	Affected: 1.0.0 , ≤ 1.1.0 (custom)
ABB	Relion Protection Relays REX615	Affected: PCL1 (custom)
ABB	Relion Protection Relays REX610	Affected: 1.1.1 (custom) Affected: 1.2.0 (custom)
ABB	Relion Protection Relays REX640	Affected: 1.0.0 , ≤ 1.0.8 (custom) Affected: 1.1.0 , ≤ 1.1.6 (custom) Affected: 1.2.0 , ≤ 1.2.3 (custom) Affected: 1.3.0 , ≤ 1.3.4 (custom)
ABB	Substation Merging Unit SMU615	Affected: 1.0.0 , ≤ 1.0.3 (custom)
ABB	Smart Substation Control and Protection SSC600	Affected: 1.0 (custom) Affected: 1.0 FP1 (custom) Affected: 1.0 FP2 (custom) Affected: 1.0 FP3 (custom) Affected: 1.0 FP4 (custom)
ABB	Relion Protection Relays REF615R ANSI	Affected: 4.0.0 , ≤ 4.1.2 (custom)
ABB	Relion Protection Relays RED615 IEC	Affected: 1.0.0 , ≤ 1.1.5 (custom)
ABB	Relion Protection Relays 615 series IEC	Affected: 2.0.0 , ≤ 2.0.9 (custom) Affected: 3.0.0 , ≤ 3.0.10 (custom) Affected: 4.0.0 , ≤ 4.0.8 (custom) Affected: 4.1.9 , ≤ 4.1.10 (custom) Affected: 5.0.0 , ≤ 5.0.17 (custom) Affected: 5.1.0 , ≤ 5.1.24 (custom)
ABB	Relion Protection Relays 615 series CN	Affected: 2.0.0 , ≤ 2.0.9 (custom) Affected: 3.0.0 , ≤ 3..0.7 (custom) Affected: 3.1.0 , ≤ 3.1.10 (custom) Affected: 4.1.0 , ≤ 4.1.9 (custom) Affected: 5.1.0 , ≤ 5.1.4 (custom)
ABB	Relion Protection Relays 615 series ANSI	Affected: 2.0.0 , ≤ 2.0.9 (custom) Affected: 4.0.0 , ≤ 4.0.5 (custom) Affected: 4.1.0 , ≤ 4.1.1 (custom) Affected: 4.2.0 , ≤ 4.2.3 (custom) Affected: 5.1.0 , ≤ 5.1.3 (custom)
ABB	Relion Protection Relays RER615	Affected: 1.0.0 , ≤ 1.1.4 (custom) Affected: 2.0.0 , ≤ 2.0.9 (custom)
ABB	Relion Protection Relays REC615	Affected: 1.0.0 , ≤ 1.1.4 (custom) Affected: 2.0.0 , ≤ 2.0.9 (custom)
ABB	RBX615	Affected: 1.0.0 , ≤ 2.0.0 (custom)
ABB	RER620 ANSI	Affected: 1.0.0 , ≤ 1.3 (custom)
ABB	620 Series IEC/CN	Affected: 2.0.0 , ≤ 2.0.13 (custom) Affected: 2.1.0 , ≤ 2.1.16 (custom)
ABB	RE_630	Affected: 1.1.0 , ≤ 1.1.0 C5 (custom) Affected: 1.2.0 , ≤ 1.2.0 B8 (custom) Affected: 1.3.0 , ≤ 1.3.0 B1 (custom)
ABB	RIO600	Affected: 1.0.0 , ≤ 1.8.8 (custom)
ABB	COM600	Affected: 3.3 (custom) Affected: 3.4 (custom) Affected: 3.5 (custom) Affected: 4.0 (custom) Affected: 4.1 (custom) Affected: 5.0 (custom) Affected: 5.1 (custom)
ABB	SPA ZC-400	Affected: Exx (custom) Affected: Mxx (custom) Affected: Sxx (custom) Affected: xMx (custom) Affected: Exxx (custom) Affected: Mxxx (custom) Affected: Sxxx (custom) Affected: xMxx (custom) Affected: xxxC (custom)
ABB	COM600F ANSI	Affected: 4.1 (custom) Affected: 5.0 (custom)
ABB	SPA ZC-402	Affected: Exxx (custom) Affected: Mxxx (custom) Affected: Sxxx (custom) Affected: xMxx (custom) Affected: xxxC (custom)
ABB	REF542plus	Affected: R1.0 (custom) Affected: R1.1 (custom) Affected: R2.0 (custom) Affected: R2.5 (custom) Affected: R2.5 ATEX (custom) Affected: R2.5 SP3 (custom) Affected: R2.6 (custom) Affected: R3.0 (custom) Affected: R3.0 SP1 (custom) Affected: R3.0 SP3 (custom)
ABB	SUE 3000	Affected: 2.6 V4F07x (custom) Affected: 3.0FP1 V4F11x (custom) Affected: V4D02x (custom) Affected: V4E0xx (custom)
ABB	ARG600/ARP600/ARR600/ARC600 single SIM	Affected: 3.x.x , ≤ 3.4.13 (custom)
ABB	ARG600/ARP600 dual SIM	Affected: 2.x.x , ≤ 3.4.13 (custom)
ABB	ARM600	Affected: 4.x.x , ≤ 5.0.3 (custom)
ABB	REC601/RER601	Affected: 1.1 , ≤ 1.2 (custom)
ABB	REC603/RER603	Affected: 1.1 , ≤ 1.2 (custom)

Date Public

2024-10-21 08:50

Credits

ABB thanks Jos Wetzels from Midnight Blue (midnightblue.nl) for helping to identify the vulnerabilities and protecting our customers.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-8036",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-25T18:01:01.779059Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-25T18:01:19.582Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays RE_611 IEC",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.0.4",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2.0.4",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays REF615 IEC",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.2.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays REF615 ANSI",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.1.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays REX615",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "PCL1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays REX610",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "1.1.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "1.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays REX640",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.0.8",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.1.6",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.2.3",
              "status": "affected",
              "version": "1.2.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.3.4",
              "status": "affected",
              "version": "1.3.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Substation Merging Unit SMU615",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.0.3",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Smart Substation Control and Protection SSC600",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "1.0 FP1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "1.0 FP2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "1.0 FP3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "1.0 FP4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays REF615R ANSI",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "4.1.2",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays RED615 IEC",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.1.5",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays 615 series IEC",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "2.0.9",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "3.0.10",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "4.0.8",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "4.1.10",
              "status": "affected",
              "version": "4.1.9",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.0.17",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.24",
              "status": "affected",
              "version": "5.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays 615 series CN",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "2.0.9",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "3..0.7",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "3.1.10",
              "status": "affected",
              "version": "3.1.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "4.1.9",
              "status": "affected",
              "version": "4.1.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.4",
              "status": "affected",
              "version": "5.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays 615 series ANSI",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "2.0.9",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "4.0.5",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "4.1.1",
              "status": "affected",
              "version": "4.1.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "4.2.3",
              "status": "affected",
              "version": "4.2.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.1.3",
              "status": "affected",
              "version": "5.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays RER615",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.1.4",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2.0.9",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Relion Protection Relays REC615",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.1.4",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2.0.9",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBX615",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "2.0.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RER620 ANSI",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.3",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "620 Series IEC/CN",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "2.0.13",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2.1.16",
              "status": "affected",
              "version": "2.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RE_630",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.1.0 C5",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.2.0 B8",
              "status": "affected",
              "version": "1.2.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.3.0 B1",
              "status": "affected",
              "version": "1.3.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RIO600",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.8.8",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "COM600",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "3.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "3.4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "3.5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "4.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "4.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "5.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "5.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SPA ZC-400",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "Exx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "Mxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "Sxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "xMx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "Exxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "Mxxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "Sxxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "xMxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "xxxC",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "COM600F ANSI",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "4.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "5.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SPA ZC-402",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "Exxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "Mxxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "Sxxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "xMxx",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "xxxC",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "REF542plus",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "R1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R1.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R2.5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R2.5 ATEX",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R2.5 SP3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R2.6",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R3.0 SP1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "R3.0 SP3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SUE 3000",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "2.6 V4F07x",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "3.0FP1 V4F11x",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4D02x",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4E0xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ARG600/ARP600/ARR600/ARC600 single SIM",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "3.4.13",
              "status": "affected",
              "version": "3.x.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ARG600/ARP600 dual SIM",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "3.4.13",
              "status": "affected",
              "version": "2.x.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ARM600",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "5.0.3",
              "status": "affected",
              "version": "4.x.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "REC601/RER601",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.2",
              "status": "affected",
              "version": "1.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "REC603/RER603",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "1.2",
              "status": "affected",
              "version": "1.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "ABB thanks Jos Wetzels from Midnight Blue (midnightblue.nl) for helping to identify the vulnerabilities and protecting our customers."
        }
      ],
      "datePublic": "2024-10-21T08:50:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(247, 247, 247);\"\u003eABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.\u003c/span\u003e"
            }
          ],
          "value": "ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "IRRECOVERABLE",
            "Safety": "PRESENT",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:N/R:I/V:D/RE:H/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347 Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-30T17:20:11.747Z",
        "orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
        "shortName": "ABB"
      },
      "references": [
        {
          "url": "https://search.abb.com/library/Download.aspx?DocumentID=2NGA001911\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Unauthorized Modifications of Firmware and Configuration",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Please follow the guidelines in the following Product Advisory Note to improve the system security:\n\u003cbr\u003eGuidelines to Prevent Unauthorized Modifications of Firmware and Configuration, ABB Digital\nSubstation Products (\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://search.abb.com/library/Download.aspx?DocumentID=2NGA002288\u0026amp;LanguageCode=en\u0026amp;DocumentPartId=\u0026amp;Action=Launch\"\u003ehttps://search.abb.com/library/Download.aspx?DocumentID=2NGA002288\u0026amp;LanguageCode=en\u0026amp;DocumentP...\u003c/a\u003e)\u003cbr\u003e"
            }
          ],
          "value": "Please follow the guidelines in the following Product Advisory Note to improve the system security:\n\nGuidelines to Prevent Unauthorized Modifications of Firmware and Configuration, ABB Digital\nSubstation Products ( https://search.abb.com/library/Download.aspx?DocumentID=2NGA002288\u0026LanguageCode=en\u0026DocumentP... https://search.abb.com/library/Download.aspx )"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
    "assignerShortName": "ABB",
    "cveId": "CVE-2024-8036",
    "datePublished": "2024-10-25T16:57:31.114Z",
    "dateReserved": "2024-08-20T23:19:07.498Z",
    "dateUpdated": "2024-10-30T17:20:11.747Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.