Abb Symphony Plus S+ Operations vulnerabilities

2 CVEs affecting Abb Symphony Plus S+ Operations, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-0335, published 2024-04-03.

More from Abb.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-0335, published 2024-04-03. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. ABB has internally identified a vulnerability in the ABB VPNI feature of the S+ Control API component which may be used by several Symphony Plus products (e.g., S+ Operations, S+ Engineering and S+…
• CVE-2023-0228, published 2023-03-02. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2.