CVE-2020-24677 in Symphony Plus Operations

Résumé

par MITRE • 23/12/2020

Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Divulgation: 23/12/2020
• Modérer: accepté
• Entrée: VDB-166702
• CPE: prêt
• CWE: CWE-754 (confirmé)
• CVSS: 8.8 (VulDB)
• EPSS: 0.01387
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-24677
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-24677
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-24677/