Read the docs
TI-2024-07450 Aliases CVE-2024-8036GHSA-8pmx-rxgv-j8j9

Unauthorized Modifications of Firmware and Configuration

Priority LOW 20CWE-347Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
Passive
Attack complexity
High
Attack requirements
Present
Impact type
Security bypass
Confidentiality · integrity · availability
Low · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-347.

Summary

ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00153 4th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ABBRelion Protection Relays RE_611 IEC1.0.0 – 1.0.4; 2.0.0 – 2.0.4—No fix listedCNA
ABBRelion Protection Relays REF615 IEC1.0.0 – 1.2.0—No fix listedCNA
ABBRelion Protection Relays REF615 ANSI1.0.0 – 1.1.0—No fix listedCNA
ABBRelion Protection Relays REX615PCL1—No fix listedCNA
ABBRelion Protection Relays REX6101.1.1; 1.2.0—No fix listedCNA
ABBRelion Protection Relays REX6401.0.0 – 1.0.8; 1.1.0 – 1.1.6; 1.2.0 – 1.2.3; 1.3.0 – 1.3.4—No fix listedCNA
ABBSubstation Merging Unit SMU6151.0.0 – 1.0.3—No fix listedCNA
ABBSmart Substation Control and Protection SSC6001.0; 1.0 FP1; 1.0 FP2; 1.0 FP3; 1.0 FP4—No fix listedCNA
ABBRelion Protection Relays REF615R ANSI4.0.0 – 4.1.2—No fix listedCNA
ABBRelion Protection Relays RED615 IEC1.0.0 – 1.1.5—No fix listedCNA
ABBRelion Protection Relays 615 series IEC2.0.0 – 2.0.9; 3.0.0 – 3.0.10; 4.0.0 – 4.0.8; 4.1.9 – 4.1.10; 5.0.0 – 5.0.17; 5.1.0 – 5.1.24—No fix listedCNA
ABBRelion Protection Relays 615 series CN2.0.0 – 2.0.9; 3.0.0 – 3..0.7; 3.1.0 – 3.1.10; 4.1.0 – 4.1.9; 5.1.0 – 5.1.4—No fix listedCNA
ABBRelion Protection Relays 615 series ANSI2.0.0 – 2.0.9; 4.0.0 – 4.0.5; 4.1.0 – 4.1.1; 4.2.0 – 4.2.3; 5.1.0 – 5.1.3—No fix listedCNA
ABBRelion Protection Relays RER6151.0.0 – 1.1.4; 2.0.0 – 2.0.9—No fix listedCNA
ABBRelion Protection Relays REC6151.0.0 – 1.1.4; 2.0.0 – 2.0.9—No fix listedCNA
ABBRBX6151.0.0 – 2.0.0—No fix listedCNA
ABBRER620 ANSI1.0.0 – 1.3—No fix listedCNA
ABB620 Series IEC/CN2.0.0 – 2.0.13; 2.1.0 – 2.1.16—No fix listedCNA
ABBRE_6301.1.0 – 1.1.0 C5; 1.2.0 – 1.2.0 B8; 1.3.0 – 1.3.0 B1—No fix listedCNA
ABBRIO6001.0.0 – 1.8.8—No fix listedCNA
ABBCOM6003.3; 3.4; 3.5; 4.0; 4.1; 5.0; 5.1—No fix listedCNA
ABBSPA ZC-400Exx; Mxx; Sxx; xMx; Exxx; Mxxx; Sxxx; xMxx; xxxC—No fix listedCNA
ABBCOM600F ANSI4.1; 5.0—No fix listedCNA
ABBSPA ZC-402Exxx; Mxxx; Sxxx; xMxx; xxxC—No fix listedCNA
ABBREF542plusR1.0; R1.1; R2.0; R2.5; R2.5 ATEX; R2.5 SP3; R2.6; R3.0; R3.0 SP1; R3.0 SP3—No fix listedCNA
ABBSUE 30002.6 V4F07x; 3.0FP1 V4F11x; V4D02x; V4E0xx—No fix listedCNA
ABBARG600/ARP600/ARR600/ARC600 single SIM3.x.x – 3.4.13—No fix listedCNA
ABBARG600/ARP600 dual SIM2.x.x – 3.4.13—No fix listedCNA
ABBARM6004.x.x – 5.0.3—No fix listedCNA
ABBREC601/RER6011.1 – 1.2—No fix listedCNA
ABBREC603/RER6031.1 – 1.2—No fix listedCNA
  • Relion Protection Relays RE_611 IEC VendorABB Affected 1.0.0 – 1.0.4; 2.0.0 – 2.0.4 Fixed in — No fix listed CNA
  • Relion Protection Relays REF615 IEC VendorABB Affected 1.0.0 – 1.2.0 Fixed in — No fix listed CNA
  • Relion Protection Relays REF615 ANSI VendorABB Affected 1.0.0 – 1.1.0 Fixed in — No fix listed CNA
  • Relion Protection Relays REX615 VendorABB Affected PCL1 Fixed in — No fix listed CNA
  • Relion Protection Relays REX610 VendorABB Affected 1.1.1; 1.2.0 Fixed in — No fix listed CNA
  • Relion Protection Relays REX640 VendorABB Affected 1.0.0 – 1.0.8; 1.1.0 – 1.1.6; 1.2.0 – 1.2.3; 1.3.0 – 1.3.4 Fixed in — No fix listed CNA
  • Substation Merging Unit SMU615 VendorABB Affected 1.0.0 – 1.0.3 Fixed in — No fix listed CNA
  • Smart Substation Control and Protection SSC600 VendorABB Affected 1.0; 1.0 FP1; 1.0 FP2; 1.0 FP3; 1.0 FP4 Fixed in — No fix listed CNA
  • Relion Protection Relays REF615R ANSI VendorABB Affected 4.0.0 – 4.1.2 Fixed in — No fix listed CNA
  • Relion Protection Relays RED615 IEC VendorABB Affected 1.0.0 – 1.1.5 Fixed in — No fix listed CNA
  • Relion Protection Relays 615 series IEC VendorABB Affected 2.0.0 – 2.0.9; 3.0.0 – 3.0.10; 4.0.0 – 4.0.8; 4.1.9 – 4.1.10; 5.0.0 – 5.0.17; 5.1.0 – 5.1.24 Fixed in — No fix listed CNA
  • Relion Protection Relays 615 series CN VendorABB Affected 2.0.0 – 2.0.9; 3.0.0 – 3..0.7; 3.1.0 – 3.1.10; 4.1.0 – 4.1.9; 5.1.0 – 5.1.4 Fixed in — No fix listed CNA
  • Relion Protection Relays 615 series ANSI VendorABB Affected 2.0.0 – 2.0.9; 4.0.0 – 4.0.5; 4.1.0 – 4.1.1; 4.2.0 – 4.2.3; 5.1.0 – 5.1.3 Fixed in — No fix listed CNA
  • Relion Protection Relays RER615 VendorABB Affected 1.0.0 – 1.1.4; 2.0.0 – 2.0.9 Fixed in — No fix listed CNA
  • Relion Protection Relays REC615 VendorABB Affected 1.0.0 – 1.1.4; 2.0.0 – 2.0.9 Fixed in — No fix listed CNA
  • RBX615 VendorABB Affected 1.0.0 – 2.0.0 Fixed in — No fix listed CNA
  • RER620 ANSI VendorABB Affected 1.0.0 – 1.3 Fixed in — No fix listed CNA
  • 620 Series IEC/CN VendorABB Affected 2.0.0 – 2.0.13; 2.1.0 – 2.1.16 Fixed in — No fix listed CNA
  • RE_630 VendorABB Affected 1.1.0 – 1.1.0 C5; 1.2.0 – 1.2.0 B8; 1.3.0 – 1.3.0 B1 Fixed in — No fix listed CNA
  • RIO600 VendorABB Affected 1.0.0 – 1.8.8 Fixed in — No fix listed CNA
  • COM600 VendorABB Affected 3.3; 3.4; 3.5; 4.0; 4.1; 5.0; 5.1 Fixed in — No fix listed CNA
  • SPA ZC-400 VendorABB Affected Exx; Mxx; Sxx; xMx; Exxx; Mxxx; Sxxx; xMxx; xxxC Fixed in — No fix listed CNA
  • COM600F ANSI VendorABB Affected 4.1; 5.0 Fixed in — No fix listed CNA
  • SPA ZC-402 VendorABB Affected Exxx; Mxxx; Sxxx; xMxx; xxxC Fixed in — No fix listed CNA
  • REF542plus VendorABB Affected R1.0; R1.1; R2.0; R2.5; R2.5 ATEX; R2.5 SP3; R2.6; R3.0; R3.0 SP1; R3.0 SP3 Fixed in — No fix listed CNA
  • SUE 3000 VendorABB Affected 2.6 V4F07x; 3.0FP1 V4F11x; V4D02x; V4E0xx Fixed in — No fix listed CNA
  • ARG600/ARP600/ARR600/ARC600 single SIM VendorABB Affected 3.x.x – 3.4.13 Fixed in — No fix listed CNA
  • ARG600/ARP600 dual SIM VendorABB Affected 2.x.x – 3.4.13 Fixed in — No fix listed CNA
  • ARM600 VendorABB Affected 4.x.x – 5.0.3 Fixed in — No fix listed CNA
  • REC601/RER601 VendorABB Affected 1.1 – 1.2 Fixed in — No fix listed CNA
  • REC603/RER603 VendorABB Affected 1.1 – 1.2 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-8036
  2. 2026-10-03 Alias added: GHSA-8pmx-rxgv-j8j9

References

Other 1

  • TI-2019-03985 ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function CVSS 3.1CRITICAL 9.8
  • TI-2019-05127 The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is… CVSS 3.1HIGH 8.8
  • TI-2024-05845 Remote code execution in ABB ASPECT-Enterprise CVSS 4.0CRITICAL 9.4
  • TI-2024-34459 Service control in ABB ASPECT-Enterprise CVSS 4.0HIGH 8.8
  • TI-2024-05758 unauthorized file access CVSS 4.0CRITICAL 9.4
  • TI-2022-00806 ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access CVSS 3.1CRITICAL 9.8
See all 262 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences