CVE-2020-24678CWE-269

Potential Privilege Escalation in Symphony Plus

High · published December 22, 2020

CVSS v3.1
8.8
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the possibility to allow remote authenticated users to gain high privileges.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01523 · 74.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-12-22T21:13Z
EPSS history
Timeline
  • 22 DEC 21:13Z
    Potential Privilege Escalation in Symphony Plus
    cvelistv5