Vulnerability Details CVE-2020-24677
Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.5%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=Launch
Products affected by CVE-2020-24677
-
cpe:2.3:a:abb:symphony_+_historian:3.0
-
cpe:2.3:a:abb:symphony_+_historian:3.1
-
cpe:2.3:a:abb:symphony_+_operations:1.1
-
cpe:2.3:a:abb:symphony_+_operations:2.0
-
cpe:2.3:a:abb:symphony_+_operations:2.1
-
cpe:2.3:a:abb:symphony_+_operations:3.0
-
cpe:2.3:a:abb:symphony_+_operations:3.1
-
cpe:2.3:a:abb:symphony_+_operations:3.2
-
cpe:2.3:a:abb:symphony_+_operations:3.3