Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Inductive Automation Component: Ignition Gateway Clear all filters
TI-2020-11371 CVE-2020-14520 · GHSA-67jg-mxq3-434p

Missing authorization in Ignition 8

Priority LOW 35

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (all versions prior to 8.0.13).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01152 Published 2020-07-31 Fixed in 8.0.13 CWE-862
TI-2020-08556 CVE-2020-10644 · GHSA-3qvm-hgh7-6462

Deserialization of untrusted data in Ignition 8 Gateway

Priority MEDIUM 52

The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.20208 Published 2020-06-09 No fix listed CWE-502
TI-2020-09663 CVE-2020-12004 · GHSA-h653-mvj7-48w8

Missing authentication in Ignition 8 Gateway

Priority MEDIUM 48

The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensiti…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13968 Published 2020-06-09 No fix listed CWE-306
TI-2020-08553 CVE-2020-10641 · GHSA-gxjf-ghq5-m6mr

Improper access control in Ignition 8 Gateway

Priority LOW 35

An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01278 Published 2020-04-28 Fixed in 8.0.10 CWE-284