CVE-2020-24677

Published: Dec 22, 2020Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data.

Affected (10)

Products: Abb: Symphony + Historian, Symphony + Operations

Abb

2 products

Symphony + Historian

Symphony + Operations

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Abb Symphony + Historian	Version 3.0
Abb Symphony + Historian	Version 3.1
Abb Symphony + Operations	Version 1.1
Abb Symphony + Operations	Version 2.0
Abb Symphony + Operations	Version 2.1 sp1
Abb Symphony + Operations	Version 2.1 sp2
Abb Symphony + Operations	Version 3.0
Abb Symphony + Operations	Version 3.1
Abb Symphony + Operations	Version 3.2
Abb Symphony + Operations	Version 3.3