Not rated
CVE-2020-10644 The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted…
Description
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ignition 8 Gateway | Versions not published |
Other CVEs of Ignition 8 Gateway
The 4 CVEs of Ignition 8 Gateway →
CVE-2020-12000
The affected product is vulnerable to the handling of serialized data
Not rated
CVE-2020-12004
The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions…
Not rated
CVE-2020-10641
An unprotected logging route may allow an attacker to write endless log statements into the database without space…
Not rated