Vulnerability Description
A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Abb | Symphony \+ Historian | 3.0 |
| Abb | Symphony \+ Operations | 1.1 |
Related Weaknesses (CWE)
References
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=MitigationVendor Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=MitigationVendor Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=MitigationVendor Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=MitigationVendor Advisory
FAQ
What is CVE-2020-24679?
CVE-2020-24679 is a vulnerability with a CVSS score of 7.5 (HIGH). A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the servi...
How severe is CVE-2020-24679?
CVE-2020-24679 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-24679?
Check the references section above for vendor advisories and patch information. Affected products include: Abb Symphony \+ Historian, Abb Symphony \+ Operations.