PT-2019-10180 · Abb · Relion 630

Published 2019-01-16 · Updated 2023-05-16 · CVE-2018-20720

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: ABB Relion 630 devices versions 1.1 through 1.1.0.C0 ABB Relion 630 devices versions 1.2 through 1.2.0.B3 ABB Relion 630 devices versions 1.3 through 1.3.0.A6

Description: The issue allows remote attackers to cause a denial of service, resulting in a device reboot, via a reboot command in an SPA message.

Recommendations: For versions 1.1 through 1.1.0.C0, update to version 1.1.0.C0 or later. For versions 1.2 through 1.2.0.B3, update to version 1.2.0.B3 or later. For versions 1.3 through 1.3.0.A6, update to version 1.3.0.A6 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-20720

Affected Products

Relion 630

References · 5

• http://search.abb.com/library/Download.aspx?DocumentID=1MRS758909&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-20720 · Security Note
• https://osv.dev/vulnerability/CVE-2018-20720 · Vendor Advisory
• http://securityfocus.com/bid/106641 · Note
• https://t.me/cvenotify/50611 · Telegram Post