CVE-2020-24679: Denial of Service attack on Symphony Plus
A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-24679?
CVE-2020-24679 is a vulnerability in ABB Symphony + Operations and Symphony + Historian services that allows for a Denial of Service (DoS) attack by specially crafted messages, potentially leading to the crash or execution of arbitrary code on the host machine.
Which software versions are affected by CVE-2020-24679?
CVE-2020-24679 affects ABB Symphony + Historian versions 3.0 and 3.1, as well as ABB Symphony + Operations versions 1.1, 2.0, 2.1-sp1, 2.1-sp2, 3.0, 3.1, 3.2, and 3.3.
What is the severity level of CVE-2020-24679?
CVE-2020-24679 has a severity level of 9.8 (Critical).
How can CVE-2020-24679 be exploited?
CVE-2020-24679 can be exploited by sending specially crafted messages to the ABB Symphony + Operations and Symphony + Historian services.
Are there any references available for CVE-2020-24679?
Yes, you can find references for CVE-2020-24679 at the following links: [link1](https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=Launch), [link2](https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=Launch)