ABB IEC 61850 Communication Stack Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the IEC 61850 communication stack of ABB's AC800M (System 800xA) and Symphony Plus products. This vulnerability allows an attacker with access to IEC 61850 networks to disrupt communication by sending specially crafted 61850 packets. The affected modules, PM 877, CI850, and CI868, can be forced into fault mode or made unavailable, causing a denial-of-service situation on the S+ Operations 61850 connectivity. However, the overall availability and functionality of the S+ Operations node remain unaffected. The vulnerability does not impact the System 800xA IEC61850 Connect.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition on the 61850 communication function, causing unavailability of the S+ Operations 61850 connectivity while leaving the overall S+ Operations node functionality intact.