Skip to content
OpenAdvisories
High · 8.8 CVE-2020-24678 EUVD-2020-17392GHSA-49hv-qhwg-6w6c

Potential Privilege Escalation in Symphony Plus

Published Dec 22, 2020 · Updated Sep 17, 2024 · Assigned by ABB

Description

An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the possibility to allow remote authenticated users to gain high privileges.

Affected products

VendorProductAffectedFixed
ABB ABB Ability™ Symphony® Plus Operations unspecified – < 3.3 Service Pack 1, unspecified – < 2.1 SP2 Rollup 2, unspecified – < 2.2 3.3 Service Pack 1
ABB ABB Ability™ Symphony® Plus Historian unspecified – < 3.2 3.2

References