Not rated
CVE-2020-12000 The affected product is vulnerable to the handling of serialized data
Description
The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ignition 8 Gateway | Versions not published |
Other CVEs of Ignition 8 Gateway
The 4 CVEs of Ignition 8 Gateway →
CVE-2020-10644
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted…
Not rated
CVE-2020-12004
The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions…
Not rated
CVE-2020-10641
An unprotected logging route may allow an attacker to write endless log statements into the database without space…
Not rated