CVE-2020-24677CWE-754
Insecure Web Service in Symphony Plus
High · published December 22, 2020
What it is
Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data.
The record
Technical detail
- CVSS v3.1
- 8.8 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.01448 · 73.1th percentile
- Weakness
- CWE-754 · Improper Check for Unusual or Exceptional Conditions
- Published
- 2020-12-22T21:16Z
EPSS history
Timeline