Skip to content
OpenAdvisories
High ICSA-23-068-03 1 CVE

ABB Ability Symphony Plus

Published Apr 3, 2023 · Updated Apr 3, 2023

Vendor: ABB Product: S+ Operations

Summary

Successful exploitation of this vulnerability could allow an unauthorized client to connect to the S+ Operations servers (human machine interface (HMI) network), to act as a legitimate S+ Operations client.

Vulnerabilities 1

  • High 8.8
    CVE-2023-0228

    Improper authentication vulnerability in S+ Operations

    Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2.

    ABB Symphony Plus S+ Operations ICS / OT

Revision history

  1. #1

    CSAF Creation Date

References