Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f982-vxqp-wp2r

Опубликовано: 03 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

ABB has internally identified a vulnerability in the ABB VPNI feature of the S+ Control API component which may be used by several Symphony Plus products (e.g., S+ Operations, S+ Engineering and S+ Analyst)

This issue affects Symphony Plus S+ Operations: from 3..0;0 through 3.3 SP1 RU4, from 2.1;0 through 2.1 SP2 RU3, from 2.0;0 through 2.0 SP6 TC6; Symphony Plus S+ Engineering: from 2.1 through 2.3 RU3; Symphony Plus S+ Analyst: from 7.0.0.0 through 7.2.0.2.

ABB has internally identified a vulnerability in the ABB VPNI feature of the S+ Control API component which may be used by several Symphony Plus products (e.g., S+ Operations, S+ Engineering and S+ Analyst)

This issue affects Symphony Plus S+ Operations: from 3..0;0 through 3.3 SP1 RU4, from 2.1;0 through 2.1 SP2 RU3, from 2.0;0 through 2.0 SP6 TC6; Symphony Plus S+ Engineering: from 2.1 through 2.3 RU3; Symphony Plus S+ Analyst: from 7.0.0.0 through 7.2.0.2.

EPSS

Процентиль: 44%
0.00218
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
CWE-23

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

ABB has internally identified a vulnerability in the ABB VPNI feature of the S+ Control API component which may be used by several Symphony Plus products (e.g., S+ Operations, S+ Engineering and S+ Analyst) This issue affects Symphony Plus S+ Operations: from 3..0;0 through 3.3 SP1 RU4, from 2.1;0 through 2.1 SP2 RU3, from 2.0;0 through 2.0 SP6 TC6; Symphony Plus S+ Engineering: from 2.1 through 2.3 RU3; Symphony Plus S+ Analyst: from 7.0.0.0 through 7.2.0.2.

CVSS3: 7.5
fstec
почти 2 года назад

Уязвимость функции ABB VPNI компонента S+ Control API программного средства управления и мониторинга ABB Symphony Plus S+ Operations, S+ Engineering, S+ Analyst, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 44%
0.00218
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
CWE-23