CVE-2020-10644: Critical severity inductive automation ignition vulnerability
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-10644?
CVE-2020-10644 is considered a high severity vulnerability due to the risks associated with deserialization of untrusted data.
How do I fix CVE-2020-10644?
To remediate CVE-2020-10644, upgrade the Ignition 8 Gateway to version 8.0.10 or the Ignition 7 Gateway to version 7.9.14 or later.
What are the affected versions in CVE-2020-10644?
CVE-2020-10644 affects Ignition 7 Gateway versions prior to 7.9.14 and Ignition 8 Gateway versions prior to 8.0.10.
What type of vulnerability is CVE-2020-10644?
CVE-2020-10644 is a deserialization vulnerability caused by improper validation of user-supplied data.
What could an attacker achieve with CVE-2020-10644?
An attacker exploiting CVE-2020-10644 could potentially obtain sensitive information from the affected Ignition Gateway.