CVE-2020-12000: Critical severity inductive automation ignition vulnerability
The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12000?
CVE-2020-12000 has been classified as a high severity vulnerability due to its potential to allow deserialization of untrusted data.
How do I fix CVE-2020-12000?
To mitigate CVE-2020-12000, update your Ignition Gateway to version 8.0.10 or later for Ignition 8 and to version 7.9.14 or later for Ignition 7.
What versions of Ignition are affected by CVE-2020-12000?
CVE-2020-12000 affects Ignition 7 Gateway versions prior to 7.9.14 and Ignition 8 Gateway versions prior to 8.0.10.
What kind of data is involved in CVE-2020-12000?
CVE-2020-12000 involves the handling of serialized user-supplied data which lacks proper validation.
Is CVE-2020-12000 a remote vulnerability?
Yes, CVE-2020-12000 can be exploited remotely if an attacker sends malicious serialized data.