CVE-2018-20720

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-01-16 · updated 2026-06-17
Weakness: CWE-20

Description

ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service (reboot) via a reboot command in an SPA message.

Affected products

Hitachienergy Relion 630 Firmware: from 1.1.0 before 1.1.0.c0; from 1.2.0 before 1.2.0.b3; from 1.3.0 before 1.3.0.a6 — fixed in 1.1.0.c0, 1.2.0.b3, 1.3.0.a6

How to fix

Upgrade to a fixed version: Hitachienergy Relion 630 Firmware 1.1.0.c0, 1.2.0.b3, 1.3.0.a6. Check the vendor advisory for mitigations.

References

http://search.abb.com/library/Download.aspx?DocumentID=1MRS758909&LanguageCode=en&DocumentPartId=&Action=Launch
http://www.securityfocus.com/bid/106641
http://search.abb.com/library/Download.aspx?DocumentID=1MRS758909&LanguageCode=en&DocumentPartId=&Action=Launch
http://www.securityfocus.com/bid/106641

Get alerted when CVE-2018-20720 or the next vulnerability affects your stack