Skip to content
OpenAdvisories
High · 8.8 CVE-2020-24677 EUVD-2020-17391GHSA-fcfx-pc78-jw2m

Insecure Web Service in Symphony Plus

Published Dec 22, 2020 · Updated Sep 17, 2024 · Assigned by ABB

Description

Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data.

Affected products

VendorProductAffectedFixed
ABB ABB Ability™ Symphony® Plus Operations unspecified – < 3.3 Service Pack 1, unspecified – < 2.1 SP2 Rollup 2, unspecified – < 2.2 3.3 Service Pack 1
ABB ABB Ability™ Symphony® Plus Historian unspecified – < 3.2 3.2

References