Vulnerability · Published Dec 22, 2020 · Assigned by ABB
CVE-2020-24679Denial of Service attack on Symphony Plus
High 7.5
In plain English
A high-severity improper input validation in ABB Ability™ Symphony® Plus Historian from ABB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.9%top 20.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ABB | ABB Ability™ Symphony® Plus Operations | unspecified – before 3.3 Service Pack 1unspecified – before 2.1 SP2 Rollup 2unspecified – before 2.2 |
| ABB | ABB Ability™ Symphony® Plus Historian | unspecified – before 3.2 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H