CVE-2020-24677 in Symphony Plus Operations

Summary

by MITRE • 12/23/2020

Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Disclosure: 12/23/2020
• Moderation: accepted
• Entry: VDB-166702
• CPE: ready
• CWE: CWE-754 (confirmed)
• CVSS: 8.8 (VulDB)
• EPSS: 0.01387
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-24677
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-24677
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-24677/