CVE-2020-24679

概要

参考情報

• search.abb.com/library/Download.aspx · Mitigation
• search.abb.com/library/Download.aspx · Mitigation

symphony + historian のその他の脆弱性

• CVE-2020-24683緊急 9.8The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at …
• CVE-2020-24680高 7.0In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database.
• CVE-2020-24678高 8.8An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian data…
• CVE-2020-24677高 8.8Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redir…
• CVE-2020-24676高 7.8In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks. An unprivileged (b…