Skip to content
OpenAdvisories
High · 7.0 CVE-2020-24680 EUVD-2020-17394GHSA-m6v6-xwrv-hp92

Improper Credential Storage in Symphony Plus

Published Dec 22, 2020 · Updated Sep 17, 2024 · Assigned by ABB

Description

In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database.

Affected products

VendorProductAffectedFixed
ABB ABB Ability™ Symphony® Plus Operations unspecified – < 3.3 Service Pack 1, unspecified – < 2.1 SP2 Rollup 2, unspecified – < 2.2 3.3 Service Pack 1
ABB ABB Ability™ Symphony® Plus Historian unspecified – < 3.2 3.2

References