CVE-2020-12004

概要

参考情報

• packetstormsecurity.com/files/158226/Inductive-Automation-Ignition-Remote-Code-Execution.html
• us-cert.gov/ics/advisories/icsa-20-147-01 · Third Party Advisory

ignition gateway のその他の脆弱性

• CVE-2020-14520高 7.5The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (al…
• CVE-2020-12000高 7.5The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied…
• CVE-2020-10644高 7.5The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 …
• CVE-2020-10641高 7.5An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication.…