A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.
References
| Link | Resource |
|---|---|
| https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=Launch | Mitigation Vendor Advisory |
| https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=Launch | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Oct 2021, 19:05
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:abb:symphony_plus_operations:2.0:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_plus_historian:3.0:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_plus_operations:2.1:sp2:*:*:*:*:*:* cpe:2.3:a:abb:symphony_plus_historian:3.1:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_plus_operations:2.1:sp1:*:*:*:*:*:* cpe:2.3:a:abb:symphony_plus_operations:3.0:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_plus_operations:3.3:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_plus_operations:3.1:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_plus_operations:3.2:*:*:*:*:*:*:* |
cpe:2.3:a:abb:symphony_\+_operations:3.1:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_historian:3.1:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_operations:3.0:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_operations:3.3:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_operations:3.2:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_operations:2.0:*:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_operations:2.1:sp2:*:*:*:*:*:* cpe:2.3:a:abb:symphony_\+_operations:2.1:sp1:*:*:*:*:*:* |
Information
Published : 2020-12-22 22:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-24679
Mitre link : CVE-2020-24679
CVE.ORG link : CVE-2020-24679
JSON object : View
Products Affected
abb
- symphony_\+_operations
- symphony_\+_historian
CWE
CWE-20
Improper Input Validation