Skip to content
OpenAdvisories
High · 7.5 CVE-2020-24679 EUVD-2020-17393GHSA-j5q4-h79w-mh86

Denial of Service attack on Symphony Plus

Published Dec 22, 2020 · Updated Sep 17, 2024 · Assigned by ABB

Description

A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.

Affected products

VendorProductAffectedFixed
ABB ABB Ability™ Symphony® Plus Operations unspecified – < 3.3 Service Pack 1, unspecified – < 2.1 SP2 Rollup 2, unspecified – < 2.2 3.3 Service Pack 1
ABB ABB Ability™ Symphony® Plus Historian unspecified – < 3.2 3.2

References