Back to Database
Status published
High
CVE-2020-24677
Insecure Web Service in Symphony Plus
Vulnerability Description
Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-24677
Credits & Attribution
No credits recorded in the NVD database.
References
More from ABB
View All →CVE-2025-9970
Application credential stored in clear text in memory
Medium
5.7
CVE-2025-9574
Missing Authentication Vulnerability
Critical
9.9
CVE-2025-8754
ABB AbilityTM zenon Remote Transport Vulnerability
High
8.7
CVE-2025-7745
Modbus TCP buffer overread
Medium
6.9
CVE-2025-7705
Authentication bypass due to compatibility mode enabled by default
High
8.6
Affected Vendor
Affected Software
ABB Ability™ Symphony® Plus Operations, ABB Ability™ Symphony® Plus Historian
Vulnerable Versions:
unspecified
Timeline
Official Publish:
December 22nd, 2020
Last Modified:
September 17th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H