CVE-2020-24678CWE-269
Potential Privilege Escalation in Symphony Plus
High · published December 22, 2020
What it is
An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the possibility to allow remote authenticated users to gain high privileges.
The record
Technical detail
- CVSS v3.1
- 8.8 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.01523 · 74.4th percentile
- Weakness
- CWE-269 · Improper Privilege Management
- Published
- 2020-12-22T21:13Z
EPSS history
Timeline