CVE-2020-14520

概要

参考情報

• us-cert.cisa.gov/ics/advisories/icsa-20-212-01 · Third Party Advisory

ignition gateway のその他の脆弱性

• CVE-2020-12004高 7.5The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignit…
• CVE-2020-12000高 7.5The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied…
• CVE-2020-10644高 7.5The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 …
• CVE-2020-10641高 7.5An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication.…