CVE-2020-24676: Improper Handling of Insufficient Privileges

In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks. An unprivileged but authenticated user could execute arbitrary code and result in privilege escalation, depending on the user that the service runs as...

PT-2020-15802

Name of the Vulnerable Software and Affected Versions Symphony Plus Operations affected versions not specified Symphony Plus Historian affected versions not specified Description The issue allows an unprivileged but authenticated user to execute arbitrary code, potentially resulting in privilege...

PT-2020-15804

Name of the Vulnerable Software and Affected Versions S+ Operations versions affected versions not specified S+ Historian database versions affected versions not specified Description An authenticated user might execute malicious code under the user context and take control of the system. The S+...

PT-2020-15805

Name of the Vulnerable Software and Affected Versions S+ Operations and S+ Historian affected versions not specified Description The S+ Operations and S+ Historian service is susceptible to a Denial of Service DoS attack via specially crafted messages. An attacker could exploit this flaw to cause...

ABB Symphony Plus Operations and ABB Symphony Plus Historian Authorization Issues Vulnerability

ABB Symphony Plus Operations and ABB Symphony Plus Historian are both products of ABB Switzerland.ABB Symphony Plus Operations is a management device used in industrial environments to improve operational efficiency. The device provides an easy-to-use human-machine interface that seamlessly...

ABB Symphony Plus Operations and ABB Symphony Plus Historian Code Issue Vulnerabilities

ABB Symphony Plus Operations and ABB Symphony Plus Historian are both products of ABB Switzerland.ABB Symphony Plus Operations is a management device used in industrial environments to improve operational efficiency. The device provides an easy-to-use human-machine interface that seamlessly...

ABB Symphony Plus Operations and ABB Symphony Plus Historian Input Validation Error Vulnerability

ABB Symphony Plus Operations and ABB Symphony Plus Historian are both products of ABB Switzerland.ABB Symphony Plus Operations is a management device used in industrial environments to improve operational efficiency. The device provides an easy-to-use human-machine interface that seamlessly...

ABB Symphony Plus Operations and ABB Symphony Plus Historian Authorization Issues Vulnerability

ABB Symphony Plus Operations and ABB Symphony Plus Historian are both products of ABB Switzerland.ABB Symphony Plus Operations is a management device used in industrial environments to improve operational efficiency. The device provides an easy-to-use human-machine interface that seamlessly...

ABB Symphony Plus Operations and ABB Symphony Plus Historian Trust Management Issue Vulnerabilities

ABB Symphony Plus Operations and ABB Symphony Plus Historian are both products of ABB Switzerland.ABB Symphony Plus Operations is a management device used in industrial environments to improve operational efficiency. The device provides an easy-to-use human-machine interface that seamlessly...

ABB Symphony Plus Operations and ABB Symphony Plus Historian Authorization Issues Vulnerability

ABB Symphony Plus Operations and ABB Symphony Plus Historian are both products of ABB Switzerland.ABB Symphony Plus Operations is a management device used in industrial environments to improve operational efficiency. The device provides an easy-to-use human-machine interface that seamlessly...

CVE-2020-24677: Improper Check for Unusual or Exceptional Conditions

Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data...

CVE-2020-24680: Insufficiently Protected Credentials

In S+ Operations and S+ Historian, the passwords of internal users not Windows Users are encrypted but improperly stored in a database...

PT-2020-15803

Name of the Vulnerable Software and Affected Versions S+ Operations and S+ Historian affected versions not specified Description The issue affects the S+ Operations and S+ Historian web applications, potentially leading to code execution and privilege escalation. It can also redirect users to oth...

PT-2020-15799

Name of the Vulnerable Software and Affected Versions S+ Operations and S+ Historian affected versions not specified Description A successful SQL injection exploit can read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the databa...

CVE-2020-24673: Improper Neutralization of Special Elements used in an SQL Command

In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database such as shutdown the DBMS, recover the content of a given file present on the DBMS file...

CVE-2020-24674: Improper Authorization

In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated but Unauthorized remote users could execute a Denial-of-Service DoS attack, execute arbitrary code, or obtain more privilege than intended on the machines...

PT-2020-15800

Name of the Vulnerable Software and Affected Versions S+ Operations and S+ Historian affected versions not specified Description The issue arises from inadequate user permission checks for certain client commands. As a result, authenticated but unauthorized remote users could potentially execute ...

CVE-2020-24678: Improper Privilege Management

An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the possibility to allow remote authenticated users to gain high privileges...

CVE-2020-24679: Improper Input Validation

A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted...

PT-2020-15806

Name of the Vulnerable Software and Affected Versions S+ Operations and S+ Historian affected versions not specified Description The issue concerns the improper storage of encrypted passwords for internal users, excluding Windows users, in a database within S+ Operations and S+ Historian...