VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 22, 2020· Updated Jun 17, 2026

CVE-2020-24683

CVE-2020-24683

Description

The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). This is not as secure as having the server validate a client application before allowing a connection. Therefore, if the network communication or endpoints for these applications are not protected, unauthorized actors can bypass authentication and make unauthorized connections to the server application.

Affected products

13
  • S+ Operations/S+ Operationsllm-create
    Range: <=2.1 SP1
  • Abb/S+ Operationsllm-fuzzy
    Range: <=2.1 SP1
  • Abb/Symphony Plus S\+ Operationscpe-rescue
    Range: unspecified
  • Abb/Symphony \+ Historian2 versions
    cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_historian:3.1:*:*:*:*:*:*:*
  • Abb/Symphony \+ Operations8 versions
    cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.