Inductiveautomation Ignition Gateway
5 CVEs affecting Inductiveautomation Ignition Gateway. Latest disclosed: 2020-07-31. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14520 | High | 7.5 | 2020-07-31 | The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (all versions prior to… |
CVE-2020-12004 | High | 7.5 | 2020-06-09 | The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (vers… |
CVE-2020-12000 | High | 7.5 | 2020-06-09 | The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can re… |
CVE-2020-10644 | High | 7.5 | 2020-06-09 | The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions p… |
CVE-2020-10641 | High | 7.5 | 2020-04-28 | An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in co… |