ABB ABB Ability™ Symphony® Plus Operations

• CVE-2020-24675 Critical 9.8 Weak Authentication in Symphony Plus 1.2%
• CVE-2020-24673 Critical 9.8 SQL Injection in Symphony Plus 1.1%
• CVE-2020-24674 High 8.8 Improper Authorization in Symphony Plus 3.1%
• CVE-2020-24683 Critical 9.8 Authentication Bypass in Symphony Plus 1.5%
• CVE-2020-24680 High 7.0 Improper Credential Storage in Symphony Plus 0.3%
• CVE-2020-24679 High 7.5 Denial of Service attack on Symphony Plus 1.9%
• CVE-2020-24677 High 8.8 Insecure Web Service in Symphony Plus 1.4%
• CVE-2020-24676 High 7.8 Insecure Windows Services in Symphony Plus 0.4%
• CVE-2020-24678 High 8.8 Potential Privilege Escalation in Symphony Plus 1.5%