CVE-2020-12004

Mô tả

Tham khảo

• packetstormsecurity.com/files/158226/Inductive-Automation-Ignition-Remote-Code-Execution.html
• us-cert.gov/ics/advisories/icsa-20-147-01 · Third Party Advisory

Lỗ hổng khác của ignition gateway

• CVE-2020-14520CAO 7.5The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (al…
• CVE-2020-12000CAO 7.5The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied…
• CVE-2020-10644CAO 7.5The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 …
• CVE-2020-10641CAO 7.5An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication.…