VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 22, 2020· Updated Jun 17, 2026

CVE-2020-24675

CVE-2020-24675

Description

In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately write values to the controlled process.

Affected products

14
  • Abb/S+ Operationsllm-fuzzy
  • Abb/S+ Historyllm-fuzzy
  • Abb/Symphony \+ Historian2 versions
    cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_historian:3.1:*:*:*:*:*:*:*
  • Abb/Symphony \+ Operations8 versions
    cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.3:*:*:*:*:*:*:*
  • Abb/Symphony Plus S\+ Operationscpe-rescue
    Range: unspecified
  • Abb/Symphony Plus Historiancpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.