CVE-2020-24676CWE-274

Insecure Windows Services in Symphony Plus

High · published December 22, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks. An unprivileged (but authenticated) user could execute arbitrary code and result in privilege escalation, depending on the user that the service runs as.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-274 · Improper Handling of Insufficient Privileges
Published
2020-12-22T21:15Z
EPSS history
Timeline
  • 22 DEC 21:15Z
    Insecure Windows Services in Symphony Plus
    cvelistv5