Lucene search
PRIOn knowledge basePRION:CVE-2020-12000HistoryJun 09, 2020 - 6:15 p.m.
Deserialization of untrusted data
2020-06-0918:15:00
PRIOn knowledge base
www.prio-n.com
5
0.051 Low
EPSS
Percentile
93.0%
The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ignition_gateway | ge | 8.0 | |
| ignition_gateway | lt | 8.0.10 | |
| ignition_gateway | ge | 7.2.4.48 | |
| ignition_gateway | lt | 7.9.14 |
Related
nvd
nvd
CVE-2020-12000
2020-06-09 18:15:10
cve
cve
CVE-2020-12000
2020-06-09 18:15:10
cvelist
cvelist
CVE-2020-12000
2020-06-09 17:54:03
zdi
zdi
nessus
nessus
Inductive Automation Ignition 8.x < 8.0.10 Multiple Vulnerabilities
2020-06-11 00:00:00
ics
ics
Inductive Automation Ignition (Update B)
2020-07-14 12:00:00
checkpoint_advisories
checkpoint_advisories