Advisories · Technology

ABB Ability™ Symphony® Plus Historian.

Every CVE that names ABB Ability™ Symphony® Plus Historian among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-24675 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Weak Authentication in Symphony Plus
- ABB Ability™ Symphony® Plus Operations
- ABB Ability™ Symphony® Plus Historian
- Authentication bypass
Not analysed yet 22 Dec 2020
CVE-2020-24673 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL Injection in Symphony Plus
- ABB Ability™ Symphony® Plus Operations
- ABB Ability™ Symphony® Plus Historian
- SQL injection
Not analysed yet 22 Dec 2020
CVE-2020-24674 CVE record

CVSS 8.8 High

Improper Authorization in Symphony Plus
- ABB Ability™ Symphony® Plus Operations
- ABB Ability™ Symphony® Plus Historian
- Broken access control
Not analysed yet 22 Dec 2020
CVE-2020-24680 CVE record

CVSS 7.0 High

Improper Credential Storage in Symphony Plus
- ABB Ability™ Symphony® Plus Operations
- ABB Ability™ Symphony® Plus Historian
- CWE-255
Not analysed yet 22 Dec 2020
CVE-2020-24679 CVE record

CVSS 7.5 High

Denial of Service attack on Symphony Plus
- ABB Ability™ Symphony® Plus Operations
- ABB Ability™ Symphony® Plus Historian
- CWE-20
Not analysed yet 22 Dec 2020
CVE-2020-24677 CVE record

CVSS 8.8 High

Insecure Web Service in Symphony Plus
- ABB Ability™ Symphony® Plus Operations
- ABB Ability™ Symphony® Plus Historian
- CWE-754
Not analysed yet 22 Dec 2020
CVE-2020-24676 CVE record

CVSS 7.8 High

Insecure Windows Services in Symphony Plus
- ABB Ability™ Symphony® Plus Operations
- ABB Ability™ Symphony® Plus Historian
- CWE-274
Not analysed yet 22 Dec 2020
CVE-2020-24678 CVE record

CVSS 8.8 High

Potential Privilege Escalation in Symphony Plus
- ABB Ability™ Symphony® Plus Operations
- ABB Ability™ Symphony® Plus Historian
- Privilege escalation
Not analysed yet 22 Dec 2020