CVE-2020-24679

published 2020-12-22

CVE-2020-24679: A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute…

Priority P3 52 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
abb	abb_ability_symphony_plus_historian	>= unspecified < 3.2	3.2
abb	abb_ability_symphony_plus_operations	>= unspecified < 3.3 Service Pack 1	3.3 Service Pack 1
abb	abb_ability_symphony_plus_operations	>= unspecified < 2.1 SP2 Rollup 2	2.1 SP2 Rollup 2
abb	abb_ability_symphony_plus_operations	>= unspecified < 2.2	2.2
abb	symphony_+_historian	—	—
abb	symphony_+_historian	—	—
abb	symphony_+_operations	—	—
abb	symphony_+_operations	—	—
abb	symphony_+_operations	—	—
abb	symphony_+_operations	—	—
abb	symphony_+_operations	—	—
abb	symphony_+_operations	—	—
abb	symphony_+_operations	—	—

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20