VYPR
← All advisories
High severity8.8NVD Advisory· Published Dec 22, 2020· Updated Jun 17, 2026

CVE-2020-24674

CVE-2020-24674

Description

In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated but Unauthorized remote users could execute a Denial-of-Service (DoS) attack, execute arbitrary code, or obtain more privilege than intended on the machines.

Affected products

14
  • Abb/S+ Operationsllm-fuzzy
  • Abb/S+ Historianllm-create
  • Abb/Symphony \+ Historian2 versions
    cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_historian:3.1:*:*:*:*:*:*:*
  • Abb/Symphony \+ Operations8 versions
    cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.3:*:*:*:*:*:*:*
  • Abb/Symphony Plus S\+ Operationscpe-rescue
    Range: unspecified
  • Abb/Symphony Plus Historiancpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.