Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-24679

Опубликовано: 22 дек. 2020
Источник: nvd
CVSS3: 7.5
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_historian:3.1:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:2.0:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:2.1:sp1:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:2.1:sp2:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:3.0:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:3.1:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:3.2:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:3.3:*:*:*:*:*:*:*

EPSS

Процентиль: 73%
0.00764
Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-20
CWE-20

Связанные уязвимости

github
больше 3 лет назад

A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.

EPSS

Процентиль: 73%
0.00764
Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-20
CWE-20