CVE-2021-22283

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-665

Affected software

VendorProductVersions
ABBRelion protection relays - 611 series>= 1.0.0, < 2.0.3
ABBRelion protection relays - 615 series IEC 4.0 FP1>= 4.1.0, < 4.1.9
ABBRelion protection relays - 615 series CN 4.0 FP1>= 4.1.0, < 4.1.8
ABBRelion protection relays - 615 series IEC 5.0>= 5.0.0, < 5.0.12
ABBRelion protection relays - 615 series IEC 5.0 FP1>= 5.1.0, < 5.1.20
ABBRelion protection relays - 620 series IEC/CN 2.0>= 2.0.0, < 2.0.11
ABBRelion protection relays - 620 series IEC/CN 2.0 FP1>= 2.1.0, < 2.1.15
ABBRelion protection relays - REX640 PCL1>= 1.0.0, < 1.0.8
ABBRelion protection relays - REX640 PCL2>= 1.1.0, < 1.1.4
ABBRelion protection relays - REX640 PCL3>= 1.2.0, < 1.2.1
ABBRelion protection relays - RER615>= 2.0.0, < 2.0.3
ABBRemote Monitoring and Control - REC615>= 1.0.0, < 2.0.3
ABBMerging Unit- SMU615>= 1.0.0, < 1.0.2

References

Timeline

Published
Feb 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-222848.8Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code iCVE-2021-222857.5Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI8CVE-2021-222867.5Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the CVE-2021-222887.5Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the CVE-2021-222899.8Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated CVE-2021-22298.1Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: LOVs). Supported versions that are affected are 12.1CVE-2021-222918.0Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORTCVE-2021-222927.5There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized aCVE-2021-222937.5Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause iCVE-2021-222943.3A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commandsCVE-2021-222955.5A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to cause the device to haCVE-2021-222965.5A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target de
CVE-2021-22283: Medium severity, CVSS 5.5 | Vulnix