Read the docs
TI-2021-05261 Aliases CVE-2021-22283GHSA-wxvf-mm56-j2pq

MMS File Transfer Vulnerability impact on Distribution Automation products

Priority LOW 27CWE-665Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00171 6th percentileScored 2026-11-07
Fix Fixed Relion protection relays - 611 series (ABB): 2.0.3Relion protection relays - 615 series IEC 4.0 FP1 (ABB): 4.1.9+11 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ABBRelion protection relays - 611 series1.0.0 to before 2.0.32.0.3Patch availableCNA
ABBRelion protection relays - 615 series IEC 4.0 FP14.1.0 to before 4.1.9 4.1.9Patch availableCNA
ABBRelion protection relays - 615 series CN 4.0 FP14.1.0 to before 4.1.84.1.8Patch availableCNA
ABBRelion protection relays - 615 series IEC 5.05.0.0 to before 5.0.125.0.12Patch availableCNA
ABBRelion protection relays - 615 series IEC 5.0 FP15.1.0 to before 5.1.205.1.20Patch availableCNA
ABBRelion protection relays - 620 series IEC/CN 2.02.0.0 to before 2.0.112.0.11Patch availableCNA
ABBRelion protection relays - 620 series IEC/CN 2.0 FP12.1.0 to before 2.1.152.1.15Patch availableCNA
ABBRelion protection relays - REX640 PCL11.0.0 to before 1.0.81.0.8Patch availableCNA
ABBRelion protection relays - REX640 PCL21.1.0 to before 1.1.41.1.4Patch availableCNA
ABBRelion protection relays - REX640 PCL31.2.0 to before 1.2.11.2.1Patch availableCNA
ABBRelion protection relays - RER6152.0.0 to before 2.0.32.0.3Patch availableCNA
ABBRemote Monitoring and Control - REC6151.0.0 to before 2.0.32.0.3Patch availableCNA
ABBMerging Unit- SMU6151.0.0 to before 1.0.21.0.2Patch availableCNA
  • Relion protection relays - 611 series VendorABB Affected 1.0.0 to before 2.0.3 Fixed in 2.0.3 Patch available CNA
  • Relion protection relays - 615 series IEC 4.0 FP1 VendorABB Affected 4.1.0 to before 4.1.9 Fixed in 4.1.9 Patch available CNA
  • Relion protection relays - 615 series CN 4.0 FP1 VendorABB Affected 4.1.0 to before 4.1.8 Fixed in 4.1.8 Patch available CNA
  • Relion protection relays - 615 series IEC 5.0 VendorABB Affected 5.0.0 to before 5.0.12 Fixed in 5.0.12 Patch available CNA
  • Relion protection relays - 615 series IEC 5.0 FP1 VendorABB Affected 5.1.0 to before 5.1.20 Fixed in 5.1.20 Patch available CNA
  • Relion protection relays - 620 series IEC/CN 2.0 VendorABB Affected 2.0.0 to before 2.0.11 Fixed in 2.0.11 Patch available CNA
  • Relion protection relays - 620 series IEC/CN 2.0 FP1 VendorABB Affected 2.1.0 to before 2.1.15 Fixed in 2.1.15 Patch available CNA
  • Relion protection relays - REX640 PCL1 VendorABB Affected 1.0.0 to before 1.0.8 Fixed in 1.0.8 Patch available CNA
  • Relion protection relays - REX640 PCL2 VendorABB Affected 1.1.0 to before 1.1.4 Fixed in 1.1.4 Patch available CNA
  • Relion protection relays - REX640 PCL3 VendorABB Affected 1.2.0 to before 1.2.1 Fixed in 1.2.1 Patch available CNA
  • Relion protection relays - RER615 VendorABB Affected 2.0.0 to before 2.0.3 Fixed in 2.0.3 Patch available CNA
  • Remote Monitoring and Control - REC615 VendorABB Affected 1.0.0 to before 2.0.3 Fixed in 2.0.3 Patch available CNA
  • Merging Unit- SMU615 VendorABB Affected 1.0.0 to before 1.0.2 Fixed in 1.0.2 Patch available CNA

CPE configurations NVD · 62

CPEVersionsRoleVendor
cpe:2.3:o:abb:smu615_firmware:*:*:*:*:*:*:*:*before 1.0.2VulnerableABB
cpe:2.3:h:abb:smu615:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:rec615_firmware:*:*:*:*:*:*:*:*before 2.0.3VulnerableABB
cpe:2.3:h:abb:rec615:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:rer615_firmware:*:*:*:*:*:*:*:*before 2.0.3VulnerableABB
cpe:2.3:h:abb:rer615:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:evd4_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:evd4:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:ref615r_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:ref615r:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
  • cpe:2.3:o:abb:smu615_firmware:*:*:*:*:*:*:*:* Versions before 1.0.2 Vulnerable ·ABB
  • cpe:2.3:h:abb:smu615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:rec615_firmware:*:*:*:*:*:*:*:* Versions before 2.0.3 Vulnerable ·ABB
  • cpe:2.3:h:abb:rec615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:rer615_firmware:*:*:*:*:*:*:*:* Versions before 2.0.3 Vulnerable ·ABB
  • cpe:2.3:h:abb:rer615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:evd4_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:evd4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:ref615r_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:ref615r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
Show 52 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:abb:rex640_pcl3_firmware:*:*:*:*:*:*:*:*before 1.2.1VulnerableABB
cpe:2.3:h:abb:rex640_pcl3:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:rex640_pcl2_firmware:*:*:*:*:*:*:*:*before 1.1.4VulnerableABB
cpe:2.3:h:abb:rex640_pcl2:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:rex640_pcl1_firmware:*:*:*:*:*:*:*:*before 1.0.8VulnerableABB
cpe:2.3:h:abb:rex640_pcl1:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:rer620_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:rer620:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:relion_611_firmware:*:*:*:*:*:*:*:*before 2.0.3VulnerableABB
cpe:2.3:h:abb:relion_611:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:ref615_iec_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:ref615_iec:1.0:*:*:*:*:*:*:*1.0Running onABB
cpe:2.3:o:abb:ref615_ansi_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:ref615_ansi:1.0:*:*:*:*:*:*:*1.0Running onABB
cpe:2.3:h:abb:ref615_iec:1.1:*:*:*:*:*:*:*1.1Running onABB
cpe:2.3:o:abb:red615_iec_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:red615_iec:1.1:*:*:*:*:*:*:*1.1Running onABB
cpe:2.3:h:abb:ref615_ansi:1.1:*:*:*:*:*:*:*1.1Running onABB
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:relion_615_iec:2.0:*:*:*:*:*:*:*2.0Running onABB
cpe:2.3:h:abb:relion_615_iec:3.0:*:*:*:*:*:*:*3.0Running onABB
cpe:2.3:h:abb:relion_615_iec:4.0:-:*:*:*:*:*:*4.0Running onABB
cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:relion_615_cn:2.0:*:*:*:*:*:*:*2.0Running onABB
cpe:2.3:h:abb:relion_615_cn:3.0:*:*:*:*:*:*:*3.0Running onABB
cpe:2.3:h:abb:relion_615_cn:3.1:*:*:*:*:*:*:*3.1Running onABB
cpe:2.3:h:abb:relion_615_cn:4.0:-:*:*:*:*:*:*4.0Running onABB
cpe:2.3:h:abb:relion_615_cn:5.0:fp1:*:*:*:*:*:*5.0 fp1Running onABB
cpe:2.3:o:abb:relion_615_ansi_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:relion_615_ansi:2.0:*:*:*:*:*:*:*2.0Running onABB
cpe:2.3:h:abb:relion_615_ansi:4.0:-:*:*:*:*:*:*4.0Running onABB
cpe:2.3:h:abb:relion_615_ansi:4.0:fp1:*:*:*:*:*:*4.0 fp1Running onABB
cpe:2.3:h:abb:relion_615_ansi:4.0:fp2:*:*:*:*:*:*4.0 fp2Running onABB
cpe:2.3:h:abb:relion_615_ansi:5.0:fp1:*:*:*:*:*:*5.0 fp1Running onABB
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*before 4.1.9VulnerableABB
cpe:2.3:h:abb:relion_615_iec:4.0:fp1:*:*:*:*:*:*4.0 fp1Running onABB
cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:*before 4.1.8VulnerableABB
cpe:2.3:h:abb:relion_615_cn:4.0:fp1:*:*:*:*:*:*4.0 fp1Running onABB
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*before 5.0.12VulnerableABB
cpe:2.3:h:abb:relion_615_iec:5.0:-:*:*:*:*:*:*5.0Running onABB
cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:*before 5.1.20VulnerableABB
cpe:2.3:h:abb:relion_615_iec:5.0:fp1:*:*:*:*:*:*5.0 fp1Running onABB
cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:*before 2.0.11VulnerableABB
cpe:2.3:h:abb:relion_620_iec:2.0:-:*:*:*:*:*:*2.0Running onABB
cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:*before 2.0.11VulnerableABB
cpe:2.3:h:abb:relion_620_cn:2.0:-:*:*:*:*:*:*2.0Running onABB
cpe:2.3:o:abb:relion_620_ansi_firmware:*:*:*:*:*:*:*:*all versionsVulnerableABB
cpe:2.3:h:abb:relion_620_ansi:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:*before 2.1.15VulnerableABB
cpe:2.3:h:abb:relion_620_iec:2.0:fp1:*:*:*:*:*:*2.0 fp1Running onABB
cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:*before 2.1.15VulnerableABB
cpe:2.3:h:abb:relion_620_cn:2.0:fp1:*:*:*:*:*:*2.0 fp1Running onABB
  • cpe:2.3:o:abb:rex640_pcl3_firmware:*:*:*:*:*:*:*:* Versions before 1.2.1 Vulnerable ·ABB
  • cpe:2.3:h:abb:rex640_pcl3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:rex640_pcl2_firmware:*:*:*:*:*:*:*:* Versions before 1.1.4 Vulnerable ·ABB
  • cpe:2.3:h:abb:rex640_pcl2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:rex640_pcl1_firmware:*:*:*:*:*:*:*:* Versions before 1.0.8 Vulnerable ·ABB
  • cpe:2.3:h:abb:rex640_pcl1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:rer620_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:rer620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:relion_611_firmware:*:*:*:*:*:*:*:* Versions before 2.0.3 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_611:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:ref615_iec_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:ref615_iec:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·ABB
  • cpe:2.3:o:abb:ref615_ansi_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:ref615_ansi:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·ABB
  • cpe:2.3:h:abb:ref615_iec:1.1:*:*:*:*:*:*:* Versions 1.1 Running on ·ABB
  • cpe:2.3:o:abb:red615_iec_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:red615_iec:1.1:*:*:*:*:*:*:* Versions 1.1 Running on ·ABB
  • cpe:2.3:h:abb:ref615_ansi:1.1:*:*:*:*:*:*:* Versions 1.1 Running on ·ABB
  • cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_615_iec:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_iec:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_iec:4.0:-:*:*:*:*:*:* Versions 4.0 Running on ·ABB
  • cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_615_cn:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_cn:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_cn:3.1:*:*:*:*:*:*:* Versions 3.1 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_cn:4.0:-:*:*:*:*:*:* Versions 4.0 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_cn:5.0:fp1:*:*:*:*:*:* Versions 5.0 fp1 Running on ·ABB
  • cpe:2.3:o:abb:relion_615_ansi_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_615_ansi:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_ansi:4.0:-:*:*:*:*:*:* Versions 4.0 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_ansi:4.0:fp1:*:*:*:*:*:* Versions 4.0 fp1 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_ansi:4.0:fp2:*:*:*:*:*:* Versions 4.0 fp2 Running on ·ABB
  • cpe:2.3:h:abb:relion_615_ansi:5.0:fp1:*:*:*:*:*:* Versions 5.0 fp1 Running on ·ABB
  • cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.9 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_615_iec:4.0:fp1:*:*:*:*:*:* Versions 4.0 fp1 Running on ·ABB
  • cpe:2.3:o:abb:relion_615_cn_firmware:*:*:*:*:*:*:*:* Versions before 4.1.8 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_615_cn:4.0:fp1:*:*:*:*:*:* Versions 4.0 fp1 Running on ·ABB
  • cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:* Versions before 5.0.12 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_615_iec:5.0:-:*:*:*:*:*:* Versions 5.0 Running on ·ABB
  • cpe:2.3:o:abb:relion_615_iec_firmware:*:*:*:*:*:*:*:* Versions before 5.1.20 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_615_iec:5.0:fp1:*:*:*:*:*:* Versions 5.0 fp1 Running on ·ABB
  • cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:* Versions before 2.0.11 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_620_iec:2.0:-:*:*:*:*:*:* Versions 2.0 Running on ·ABB
  • cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:* Versions before 2.0.11 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_620_cn:2.0:-:*:*:*:*:*:* Versions 2.0 Running on ·ABB
  • cpe:2.3:o:abb:relion_620_ansi_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_620_ansi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:relion_620_iec_firmware:*:*:*:*:*:*:*:* Versions before 2.1.15 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_620_iec:2.0:fp1:*:*:*:*:*:* Versions 2.0 fp1 Running on ·ABB
  • cpe:2.3:o:abb:relion_620_cn_firmware:*:*:*:*:*:*:*:* Versions before 2.1.15 Vulnerable ·ABB
  • cpe:2.3:h:abb:relion_620_cn:2.0:fp1:*:*:*:*:*:* Versions 2.0 fp1 Running on ·ABB

Remediation

  • Fix · CNA Relion protection relays - 611 series (ABB) Fixed in 2.0.3
  • Fix · CNA Relion protection relays - 615 series IEC 4.0 FP1 (ABB) Fixed in 4.1.9
  • Fix · CNA Relion protection relays - 615 series CN 4.0 FP1 (ABB) Fixed in 4.1.8
  • Fix · CNA Relion protection relays - 615 series IEC 5.0 (ABB) Fixed in 5.0.12
  • Fix · CNA Relion protection relays - 615 series IEC 5.0 FP1 (ABB) Fixed in 5.1.20
  • Fix · CNA Relion protection relays - 620 series IEC/CN 2.0 (ABB) Fixed in 2.0.11
  • Fix · CNA Relion protection relays - 620 series IEC/CN 2.0 FP1 (ABB) Fixed in 2.1.15
  • Fix · CNA Relion protection relays - REX640 PCL1 (ABB) Fixed in 1.0.8
  • Fix · CNA Relion protection relays - REX640 PCL2 (ABB) Fixed in 1.1.4
  • Fix · CNA Relion protection relays - REX640 PCL3 (ABB) Fixed in 1.2.1
  • Fix · CNA Relion protection relays - RER615 (ABB) Fixed in 2.0.3
  • Fix · CNA Remote Monitoring and Control - REC615 (ABB) Fixed in 2.0.3
  • Fix · CNA Merging Unit- SMU615 (ABB) Fixed in 1.0.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-22283
  2. 2026-10-03 Alias added: GHSA-wxvf-mm56-j2pq

References

Sources