CVE-2020-24679

A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted.

• CWE-20
• CWE-20

• https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=LaunchMitigation, Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=LaunchMitigation, Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=2PAA123980&LanguageCode=en&DocumentPartId=&Action=LaunchMitigation, Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=2PAA123982&LanguageCode=en&DocumentPartId=&Action=LaunchMitigation, Vendor Advisory

Published

Dec 22, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24673In S+ Operations and S+ Historian, a successful SQL injectio…9.8
• CVE-2020-24674In S+ Operations and S+ Historian, not all client commands c…8.8
• CVE-2020-24675In S+ Operations and S+ History, it is possible that an unau…9.8
• CVE-2020-24676In Symphony Plus Operations and Symphony Plus Historian, som…7.8
• CVE-2020-24677Vulnerabilities in the S+ Operations and S+ Historian web ap…8.8
• CVE-2020-24678An authenticated user might execute malicious code under the…8.8
• CVE-2020-24680In S+ Operations and S+ Historian, the passwords of internal…7
• CVE-2020-24681Incorrect Permission Assignment for Critical Resource vulner…8.8
• CVE-2020-24682Unquoted Search Path or Element vulnerability in B&R Industr…7.8
• CVE-2020-24683The affected versions of S+ Operations (version 2.1 SP1 and …9.8
• CVE-2020-24685An unauthenticated specially crafted packet sent by an attac…8.6
• CVE-2020-24686The vulnerabilities can be exploited to cause the web visual…7.5