Skip to content
OpenAdvisories
Critical ICSA-20-147-01 4 CVEs

Inductive Automation Ignition (Update B)

Published May 26, 2020 · Updated Jun 30, 2020 · Revision 3

Vendor: Inductive Automation Product: Ignition 7 Gateway Product: Ignition 8 Gateway

Vulnerabilities 4

  • Medium 5.3
    CVE-2020-14479

    ICSA-20-147-01 Inductive Automation Ignition (Update B)

    Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server

    Inductive Automation Ignition 8 Gateway Ignition 7 Gateway
  • Unscored —
    CVE-2020-10644 Public exploit EPSS 20%

    The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted da…

  • Unscored —
    CVE-2020-12000

    The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper valida…

  • Unscored —
    CVE-2020-12004 Public exploit EPSS 14%

    The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior…

Revision history

  1. #3

    ICSA-20-147-01 Inductive Automation Ignition (Update B)

  2. #2

    ICSA-20-147-01 Inductive Automation Ignition (Update A)

  3. #1

    ICSA-20-147-01 Inductive Automation Ignition

References