Description
In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated but Unauthorized remote users could execute a Denial-of-Service (DoS) attack, execute arbitrary code, or obtain more privilege than intended on the machines.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ABB ABB Ability™ Symphony® Plus Operations
unspecified to < 3.3 Service Pack 1affectedunspecified to < 2.1 SP2 Rollup 2affectedunspecified to < 2.2affected
ABB ABB Ability™ Symphony® Plus Historian
unspecified to < 3.2affected