CVE-2023-0228: falha de alta gravidade em ABB Symphony Plus S+ Operations
Improper authentication vulnerability in S+ Operations
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.3%
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ABB · Symphony Plus S+ OperationsCVEs relacionadas — ABB Symphony Plus S+ Operations
No mesmo produto, das mais perigosas para as menos.
CVE-2020-8479CRITICALABB Central Licensing System - XML External Entity InjectionEPSS 2.3%CVE-2020-8481CRITICALABB Central Licensing System - Information disclosureEPSS 1.9%CVE-2020-8476MEDIUMABB Central Licensing System - Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2020-8475MEDIUMABB Central Licensing System - Denial of Service VulnerabilityEPSS 1.2%CVE-2024-0335HIGHMalformed Packet HandlingEPSS 0.6%CVE-2020-8471HIGHABB Central Licensing System - Weak File PermissionsEPSS 0.4%