CVE-2024-8036Unauthorized Modifications of Firmware and Configuration
- 4.6MediumCVSS base score
- 0.15%Exploitation in 30 daysEPSS · top 95% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.
Timeline
ID reserved
By ABB
- 2 months later
· 2 months later
Published
- 5 days later
· 5 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| ABBCNA (assigner) | 4.0 | Medium4.6 | CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:N/R:I/V:D/RE:H/U:Amber |
| ABBCNA (assigner) | 3.1 | Medium5.9 | CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H |
| NVDNVD · Deferred | 4.0 | Medium4.6 | CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:I/V:D/RE:H/U:Amber |
- EPSS (exploitation in 30 days)
- 0.15% · top 95% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.6.
Affected products
ABB · Relion Protection Relays RE_611 IEC
- affected 1.0.0 – ≤ 1.0.4
- affected 2.0.0 – ≤ 2.0.4
ABB · Relion Protection Relays REF615 IEC
- affected 1.0.0 – ≤ 1.2.0
ABB · Relion Protection Relays REF615 ANSI
- affected 1.0.0 – ≤ 1.1.0
ABB · Relion Protection Relays REX615
- affected PCL1
ABB · Relion Protection Relays REX610
- affected 1.1.1
- affected 1.2.0
ABB · Relion Protection Relays REX640
- affected 1.0.0 – ≤ 1.0.8
- affected 1.1.0 – ≤ 1.1.6
- affected 1.2.0 – ≤ 1.2.3
- affected 1.3.0 – ≤ 1.3.4
ABB · Substation Merging Unit SMU615
- affected 1.0.0 – ≤ 1.0.3
ABB · Smart Substation Control and Protection SSC600
- affected 1.0
- affected 1.0 FP1
- affected 1.0 FP2
- affected 1.0 FP3
- affected 1.0 FP4
ABB · Relion Protection Relays REF615R ANSI
- affected 4.0.0 – ≤ 4.1.2
ABB · Relion Protection Relays RED615 IEC
- affected 1.0.0 – ≤ 1.1.5
ABB · Relion Protection Relays 615 series IEC
- affected 2.0.0 – ≤ 2.0.9
- affected 3.0.0 – ≤ 3.0.10
- affected 4.0.0 – ≤ 4.0.8
- affected 4.1.9 – ≤ 4.1.10
- affected 5.0.0 – ≤ 5.0.17
- affected 5.1.0 – ≤ 5.1.24
ABB · Relion Protection Relays 615 series CN
- affected 2.0.0 – ≤ 2.0.9
- affected 3.0.0 – ≤ 3..0.7
- affected 3.1.0 – ≤ 3.1.10
- affected 4.1.0 – ≤ 4.1.9
- affected 5.1.0 – ≤ 5.1.4
ABB · Relion Protection Relays 615 series ANSI
- affected 2.0.0 – ≤ 2.0.9
- affected 4.0.0 – ≤ 4.0.5
- affected 4.1.0 – ≤ 4.1.1
- affected 4.2.0 – ≤ 4.2.3
- affected 5.1.0 – ≤ 5.1.3
ABB · Relion Protection Relays RER615
- affected 1.0.0 – ≤ 1.1.4
- affected 2.0.0 – ≤ 2.0.9
ABB · Relion Protection Relays REC615
- affected 1.0.0 – ≤ 1.1.4
- affected 2.0.0 – ≤ 2.0.9
- affected 1.0.0 – ≤ 2.0.0
- affected 1.0.0 – ≤ 1.3
- affected 2.0.0 – ≤ 2.0.13
- affected 2.1.0 – ≤ 2.1.16
- affected 1.1.0 – ≤ 1.1.0 C5
- affected 1.2.0 – ≤ 1.2.0 B8
- affected 1.3.0 – ≤ 1.3.0 B1
- affected 1.0.0 – ≤ 1.8.8
- affected 3.3
- affected 3.4
- affected 3.5
- affected 4.0
- affected 4.1
- affected 5.0
- affected 5.1
- affected Exx
- affected Mxx
- affected Sxx
- affected xMx
- affected Exxx
- affected Mxxx
- affected Sxxx
- affected xMxx
- affected xxxC
- affected 4.1
- affected 5.0
- affected Exxx
- affected Mxxx
- affected Sxxx
- affected xMxx
- affected xxxC
- affected R1.0
- affected R1.1
- affected R2.0
- affected R2.5
- affected R2.5 ATEX
- affected R2.5 SP3
- affected R2.6
- affected R3.0
- affected R3.0 SP1
- affected R3.0 SP3
- affected 2.6 V4F07x
- affected 3.0FP1 V4F11x
- affected V4D02x
- affected V4E0xx
ABB · ARG600/ARP600/ARR600/ARC600 single SIM
- affected 3.x.x – ≤ 3.4.13
- affected 2.x.x – ≤ 3.4.13
- affected 4.x.x – ≤ 5.0.3
- affected 1.1 – ≤ 1.2
- affected 1.1 – ≤ 1.2
What to do
Workaround: Please follow the guidelines in the following Product Advisory Note to improve the system security: Guidelines to Prevent Unauthorized Modifications of Firmware and Configuration, ABB Digital Substation Products ( https://search.abb.com/library/Download.aspx?DocumentID=2NGA002288&LanguageCode=en&DocumentP... https://search.abb.com/library/Download.aspx )
References
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-48895 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-8036)Record last updated .