CVE-2019-18247

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior) to reboot, which could cause a denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	Relion 650 and 670 Series	Relion 650 series versions 1.3.0.5 and prior, Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior

References

https://www.us-cert.gov/ics/advisories/icsa-19-330-02Third Party Advisory, US Government Resource
https://www.us-cert.gov/ics/advisories/icsa-19-330-02Third Party Advisory, US Government Resource

Timeline

Published: Nov 27, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-182484.3BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication chan CVE-2019-182496.1Reliable Controls MACH-ProWebCom/Sys, all versions prior to 2.15 (Firmware versions prior to 8.26.4), may allow attacker to execute commands CVE-2019-18258.1A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manage CVE-2019-182509.8In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication b CVE-2019-182518.8In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamview CVE-2019-182524.3BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent a CVE-2019-1825310.0An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.1 CVE-2019-182544.6BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to CVE-2019-182555.5HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects.CVE-2019-182564.6BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attack CVE-2019-182579.8In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfe CVE-2019-182599.8In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands.