Symphony Historian
CVE-2020-24683
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). This is not as secure as having the server validate a client application before allowing a connection. Therefore, if the network communication or endpoints for these applications are not protected, unauthorized actors can bypass authentication and make unauthorized connections to the server application.
AnalysisAI
The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-305. The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). This is not as secure as having the server validate a client application before allowing a connection. Therefore, if the network communication or endpoints for these applications are not protected, unauthorized actors can bypass authentication and make unauthorized connections to the server application. Affected products include: Abb Symphony \+ Historian, Abb Symphony \+ Operations. Version information: version 2.1.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Symphony Historian
View allA S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. Rated critical severity (CVSS
In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations Histo
In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify
An authenticated user might execute malicious code under the user context and take control of the system. Rated high sev
Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privile
In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Rated high sever
In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks
In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stor
Same weakness CWE-305 – Authentication Bypass by Primary Weakness
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today