CVE-2020-10641: High severity inductive automation ignition vulnerability
An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway (versions prior to 8.0.10), causing a denial-of-service condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-10641?
CVE-2020-10641 has a high severity rating due to its potential for denial-of-service caused by unprotected logging.
How do I fix CVE-2020-10641?
To fix CVE-2020-10641, upgrade to Ignition 8 Gateway version 8.0.10 or later, which addresses the vulnerability.
What is the impact of CVE-2020-10641?
The impact of CVE-2020-10641 includes the potential complete consumption of disk space, leading to service outages.
Which versions of Ignition are affected by CVE-2020-10641?
All versions of Inductive Automation's Ignition Gateway prior to 8.0.10 are affected by CVE-2020-10641.
Can CVE-2020-10641 be exploited remotely?
Yes, CVE-2020-10641 can be exploited remotely by an attacker who accesses the unprotected logging route.