In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately write values to the controlled process.
References
Link | Resource |
---|---|
https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=Launch | Mitigation Vendor Advisory |
https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=Launch | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2020-12-22 14:15
Updated : 2021-10-07 12:05
NVD link : CVE-2020-24675
Mitre link : CVE-2020-24675
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
abb
- symphony_\+_historian
- symphony_\+_operations