Skip to content
Fencer Intel
medium 5.9

CVE-2024-8036 json

Unauthorized Modifications of Firmware and Configuration

published 2y ago modified 4mo ago also EUVD-2024-48895

cvss
5.9
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 4%
public exploits
0
none known

Summary

ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.

Is CVE-2024-8036 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2y ago

Exploit prediction

0.15% chance of exploitation in the next 30 days, higher than 4% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CNA 3.1 5.9 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H
CNA 4.0 4.6 CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:N/R:I/V:D/RE:H/U:Amber
CNA 4.0 4.6 CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:I/V:D/RE:H/U:Amber

Affected products

  • ABB Relion Protection Relays RE_611 IEC
  • ABB Relion Protection Relays REF615 IEC
  • ABB Relion Protection Relays REF615 ANSI
  • ABB Relion Protection Relays REX615
  • ABB Relion Protection Relays REX610
  • ABB Relion Protection Relays REX640
  • ABB Substation Merging Unit SMU615
  • ABB Smart Substation Control and Protection SSC600
  • ABB Relion Protection Relays REF615R ANSI
  • ABB Relion Protection Relays RED615 IEC
  • ABB Relion Protection Relays 615 series IEC
  • ABB Relion Protection Relays 615 series CN
  • ABB Relion Protection Relays 615 series ANSI
  • ABB Relion Protection Relays RER615
  • ABB Relion Protection Relays REC615
  • ABB RBX615
  • ABB RER620 ANSI
  • ABB 620 Series IEC/CN
  • ABB RE_630
  • ABB RIO600
  • ABB COM600
  • ABB SPA ZC-400
  • ABB COM600F ANSI
  • ABB SPA ZC-402
  • ABB REF542plus
  • ABB SUE 3000
  • ABB ARG600/ARP600/ARR600/ARC600 single SIM
  • ABB ARG600/ARP600 dual SIM
  • ABB ARM600
  • ABB REC601/RER601
  • ABB REC603/RER603

Classification

Weakness
  • CWE-347 Improper Verification of Cryptographic Signature

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.