Vulnerability Details CVE-2020-24680
In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.0%
CVSS Severity
CVSS v3 Score 7.0
CVSS v2 Score 4.6
References
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=Launch
Products affected by CVE-2020-24680
-
cpe:2.3:a:abb:symphony_+_historian:3.0
-
cpe:2.3:a:abb:symphony_+_historian:3.1
-
cpe:2.3:a:abb:symphony_+_operations:1.1
-
cpe:2.3:a:abb:symphony_+_operations:2.0
-
cpe:2.3:a:abb:symphony_+_operations:2.1
-
cpe:2.3:a:abb:symphony_+_operations:3.0
-
cpe:2.3:a:abb:symphony_+_operations:3.1
-
cpe:2.3:a:abb:symphony_+_operations:3.2
-
cpe:2.3:a:abb:symphony_+_operations:3.3