CVE-2021-27196

Specially Crafted IEC 61850 Protocol Sequence Vulnerability

HIGH

7.5

CVSS Score

Published: June 14, 2021 at 09:20 PM UTC

Updated: June 17, 2026 at 03:44 AM UTC

17 products affected across 1 vendorRTU500Relion 670 FirmwareRelion 650 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 2%

Description

Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce the attack, as well as the IP addresses of the different IEC 61850 access points (of IEDs/products), to force the device to reboot, which renders the device inoperable for approximately 60 seconds. This vulnerability affects only products with IEC 61850 interfaces. This issue affects: Hitachi ABB Power Grids Relion 670 Series 1.1; 1.2.3 versions prior to 1.2.3.20; 2.0 versions prior to 2.0.0.13; 2.1; 2.2.2 versions prior to 2.2.2.3; 2.2.3 versions prior to 2.2.3.2. Hitachi ABB Power Grids Relion 670/650 Series 2.2.0 versions prior to 2.2.0.13. Hitachi ABB Power Grids Relion 670/650/SAM600-IO 2.2.1 versions prior to 2.2.1.6. Hitachi ABB Power Grids Relion 650 1.1; 1.2; 1.3 versions prior to 1.3.0.7. Hitachi ABB Power Grids REB500 7.3; 7.4; 7.5; 7.6; 8.2; 8.3. Hitachi ABB Power Grids RTU500 Series 7.x version 7.x and prior versions; 8.x version 8.x and prior versions; 9.x version 9.x and prior versions; 10.x version 10.x and prior versions; 11.x version 11.x and prior versions; 12.x version 12.x and prior versions. Hitachi ABB Power Grids FOX615 (TEGO1) R1D02 version R1D02 and prior versions. Hitachi ABB Power Grids MSM 2.1.0 versions prior to 2.1.0. Hitachi ABB Power Grids GMS600 1.3.0 version 1.3.0 and prior versions. Hitachi ABB Power Grids PWC600 1.0 versions prior to 1.0.1.4; 1.1 versions prior to 1.1.0.1.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

FOX615 TEGO1 Firmware · Hitachi Energy

95%

v < r2a16

Affected range stops below r2a16, so it looks safe — our inference, not a vendor statement

hitachienergy-fox615-tego1 (same device)

GMS600 Firmware · Hitachi Energy

95%

v ≤ 1.3.0

hitachienergy-gms600 (same device)

Modular Switchgear Monitoring Firmware · Hitachi Energy

95%

v < 2.1.0

Affected range stops below 2.1.0, so it looks safe — our inference, not a vendor statement

hitachienergy-modular-switchgear-monitoring (same device)

PWC600 Firmware · Hitachi Energy

95%

1.0 ≤ v < 1.0.1.41.1 ≤ v < 1.1.0.1

Affected range stops below 1.0.1.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 1.1.0.1, so it looks safe — our inference, not a vendor statement

hitachienergy-pwc600 (same device)

REB500 Firmware · Hitachi Energy

95%

7.3 ≤ v < 7.60.198.2 ≤ v < 8.2.0.58.3 ≤ v ≤ 8.3.1.0

Affected range stops below 7.60.19, so it looks safe — our inference, not a vendor statement

Affected range stops below 8.2.0.5, so it looks safe — our inference, not a vendor statement

hitachienergy-reb500 (same device)

Relion 650 Firmware · Hitachi Energy

95%

1.3 ≤ v < 1.3.0.72.2.0 ≤ v < 2.2.0.132.2.1 ≤ v < 2.2.1.61.1 1.2 2.1

Affected range stops below 1.3.0.7, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.2.0.13, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.2.1.6, so it looks safe — our inference, not a vendor statement

hitachienergy-relion-650 (same device)

Relion 670 Firmware · Hitachi Energy

95%

1.2.3 ≤ v < 1.2.3.202.0 ≤ v < 2.0.0.132.2.0 ≤ v < 2.2.0.132.2.1 ≤ v < 2.2.1.62.2.2 ≤ v < 2.2.2.32.2.3 ≤ v < 2.2.3.21.1 2.1

Affected range stops below 1.2.3.20, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.0.0.13, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.2.0.13, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.2.1.6, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.2.2.3, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.2.3.2, so it looks safe — our inference, not a vendor statement

hitachienergy-relion-670 (same device)

Relion Sam600-io Firmware · Hitachi Energy

95%

2.2.1 ≤ v < 2.2.1.6

Affected range stops below 2.2.1.6, so it looks safe — our inference, not a vendor statement

hitachienergy-relion-sam600-io (same device)

RTU500 · Hitachi Energy

95%

10.0 11.0 12.0 7.0 8.0 9.0

Fox615-tego1 · Hitachi Energydevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references