CVE-2020-14520: High severity inductive automation ignition vulnerability
Published Jul 31, 2020
·Updated
The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (all versions prior to 8.0.13).
Affected Software
2 affected componentsFixes available
inductiveautomation Ignition Gateway>=8.0<8.0.13
Inductive Automation Ignition 8<8.0.13
8.0.13
Event History
Jul 31, 2020
CVE Published
via MITRE·12:30 PM
Data Sourced
via MITRE·12:30 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-14520?
CVE-2020-14520 is classified as a medium severity vulnerability due to its potential for information leakage.
2
How do I fix CVE-2020-14520?
To resolve CVE-2020-14520, upgrade Ignition 8 to version 8.0.13 or later.
3
What type of vulnerability is CVE-2020-14520?
CVE-2020-14520 is an information leak vulnerability affecting Inductive Automation's Ignition 8 software.
4
Which versions of Ignition are affected by CVE-2020-14520?
CVE-2020-14520 affects all versions of Ignition 8 prior to version 8.0.13.
5
What could an attacker achieve by exploiting CVE-2020-14520?
An attacker exploiting CVE-2020-14520 could potentially obtain sensitive information from the affected system.