CVE-2020-24676CWE-274
Insecure Windows Services in Symphony Plus
High · published December 22, 2020
What it is
In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks. An unprivileged (but authenticated) user could execute arbitrary code and result in privilege escalation, depending on the user that the service runs as.
The record
Technical detail
- CVSS v3.1
- 7.8 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00429 · 36.1th percentile
- Weakness
- CWE-274 · Improper Handling of Insufficient Privileges
- Published
- 2020-12-22T21:15Z
EPSS history
Timeline