CVE-2020-24675

Published: Dec 22, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately write values to the controlled process.

Affected (10)

Products: Abb: Symphony + Historian, Symphony + Operations

Abb

2 products

Symphony + Historian

Symphony + Operations

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Abb Symphony + Historian	Version 3.0
Abb Symphony + Historian	Version 3.1
Abb Symphony + Operations	Version 1.1
Abb Symphony + Operations	Version 2.0
Abb Symphony + Operations	Version 2.1 sp1
Abb Symphony + Operations	Version 2.1 sp2
Abb Symphony + Operations	Version 3.0
Abb Symphony + Operations	Version 3.1
Abb Symphony + Operations	Version 3.2
Abb Symphony + Operations	Version 3.3