CVE-2024-8036
Unauthorized Modifications of Firmware and Configuration
- Published
- Updated
- Reserved
- Assigned by
- ABB
Description
ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| ABBCNA (assigner) | 4.0 | Medium4.6 | CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:N/R:I/V:D/RE:H/U:Amber |
| ABBCNA (assigner) | 3.1 | Medium5.9 | CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H |
| NVDNVD · Deferred | 4.0 | Medium4.6 | CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:I/V:D/RE:H/U:Amber |
- EPSS (exploitation in 30 days)
- 0.15% · top 95% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.6.
Weakness
Affected products
ABB · Relion Protection Relays RE_611 IEC
- affected 1.0.0 – ≤ 1.0.4
- affected 2.0.0 – ≤ 2.0.4
ABB · Relion Protection Relays REF615 IEC
- affected 1.0.0 – ≤ 1.2.0
ABB · Relion Protection Relays REF615 ANSI
- affected 1.0.0 – ≤ 1.1.0
ABB · Relion Protection Relays REX615
- affected PCL1
ABB · Relion Protection Relays REX610
- affected 1.1.1
- affected 1.2.0
ABB · Relion Protection Relays REX640
- affected 1.0.0 – ≤ 1.0.8
- affected 1.1.0 – ≤ 1.1.6
- affected 1.2.0 – ≤ 1.2.3
- affected 1.3.0 – ≤ 1.3.4
ABB · Substation Merging Unit SMU615
- affected 1.0.0 – ≤ 1.0.3
ABB · Smart Substation Control and Protection SSC600
- affected 1.0
- affected 1.0 FP1
- affected 1.0 FP2
- affected 1.0 FP3
- affected 1.0 FP4
ABB · Relion Protection Relays REF615R ANSI
- affected 4.0.0 – ≤ 4.1.2
ABB · Relion Protection Relays RED615 IEC
- affected 1.0.0 – ≤ 1.1.5
ABB · Relion Protection Relays 615 series IEC
- affected 2.0.0 – ≤ 2.0.9
- affected 3.0.0 – ≤ 3.0.10
- affected 4.0.0 – ≤ 4.0.8
- affected 4.1.9 – ≤ 4.1.10
- affected 5.0.0 – ≤ 5.0.17
- affected 5.1.0 – ≤ 5.1.24
ABB · Relion Protection Relays 615 series CN
- affected 2.0.0 – ≤ 2.0.9
- affected 3.0.0 – ≤ 3..0.7
- affected 3.1.0 – ≤ 3.1.10
- affected 4.1.0 – ≤ 4.1.9
- affected 5.1.0 – ≤ 5.1.4
ABB · Relion Protection Relays 615 series ANSI
- affected 2.0.0 – ≤ 2.0.9
- affected 4.0.0 – ≤ 4.0.5
- affected 4.1.0 – ≤ 4.1.1
- affected 4.2.0 – ≤ 4.2.3
- affected 5.1.0 – ≤ 5.1.3
ABB · Relion Protection Relays RER615
- affected 1.0.0 – ≤ 1.1.4
- affected 2.0.0 – ≤ 2.0.9
ABB · Relion Protection Relays REC615
- affected 1.0.0 – ≤ 1.1.4
- affected 2.0.0 – ≤ 2.0.9
- affected 1.0.0 – ≤ 2.0.0
- affected 1.0.0 – ≤ 1.3
- affected 2.0.0 – ≤ 2.0.13
- affected 2.1.0 – ≤ 2.1.16
- affected 1.1.0 – ≤ 1.1.0 C5
- affected 1.2.0 – ≤ 1.2.0 B8
- affected 1.3.0 – ≤ 1.3.0 B1
- affected 1.0.0 – ≤ 1.8.8
- affected 3.3
- affected 3.4
- affected 3.5
- affected 4.0
- affected 4.1
- affected 5.0
- affected 5.1
- affected Exx
- affected Mxx
- affected Sxx
- affected xMx
- affected Exxx
- affected Mxxx
- affected Sxxx
- affected xMxx
- affected xxxC
- affected 4.1
- affected 5.0
- affected Exxx
- affected Mxxx
- affected Sxxx
- affected xMxx
- affected xxxC
- affected R1.0
- affected R1.1
- affected R2.0
- affected R2.5
- affected R2.5 ATEX
- affected R2.5 SP3
- affected R2.6
- affected R3.0
- affected R3.0 SP1
- affected R3.0 SP3
- affected 2.6 V4F07x
- affected 3.0FP1 V4F11x
- affected V4D02x
- affected V4E0xx
ABB · ARG600/ARP600/ARR600/ARC600 single SIM
- affected 3.x.x – ≤ 3.4.13
- affected 2.x.x – ≤ 3.4.13
- affected 4.x.x – ≤ 5.0.3
- affected 1.1 – ≤ 1.2
- affected 1.1 – ≤ 1.2
What to do
Workaround: Please follow the guidelines in the following Product Advisory Note to improve the system security: Guidelines to Prevent Unauthorized Modifications of Firmware and Configuration, ABB Digital Substation Products ( https://search.abb.com/library/Download.aspx?DocumentID=2NGA002288&LanguageCode=en&DocumentP... https://search.abb.com/library/Download.aspx )
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-8036)Record last updated .