CVE-2020-24674

Name of the Vulnerable Software and Affected Versions S+ Operations and S+ Historian (affected versions not specified)

Description The issue arises from inadequate user permission checks for certain client commands. As a result, authenticated but unauthorized remote users could potentially execute a Denial-of-Service (DoS) attack, execute arbitrary code, or obtain more privileges than intended on the machines.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.