Vulnerabilities > ABB > Symphony Historian > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-12-22 CVE-2020-24674 Incorrect Authorization vulnerability in ABB Symphony + Historian and Symphony + Operations
In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected.
network
low complexity
abb CWE-863
critical
 9.0
9.0
2020-12-22 CVE-2020-24679 Improper Input Validation vulnerability in ABB Symphony + Historian and Symphony + Operations
A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages.
network
low complexity
abb CWE-20
critical
 10.0
10