VYPR
High severity8.8NVD Advisory· Published Dec 22, 2020· Updated Jun 17, 2026

CVE-2020-24677

CVE-2020-24677

Description

Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data.

Affected products

13
  • Range: unspecified
  • Range: unspecified
  • cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_historian:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.