In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately write values to the controlled process.
References
Link | Resource |
---|---|
https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=Launch | Mitigation Vendor Advisory |
https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=Launch | Mitigation Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: ABB
Published: 2020-12-15T00:00:00
Updated: 2020-12-22T21:22:05
Reserved: 2020-08-26T00:00:00
Link: CVE-2020-24675
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-12-22T22:15:13.257
Modified: 2021-10-07T19:05:02.520
Link: CVE-2020-24675
JSON object: View
Redhat Information
No data.
CWE