PT-2022-8567 · Inductive Automation · Ignition 7 Gateway+2

Published 2022-04-01 · Updated 2022-04-09 · CVE-2020-14479

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue allows sensitive information to be obtained through the handling of serialized data due to the lack of proper authentication required to query the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-14479

Affected Products

Ignition 7 Gateway

Ignition 8 Gateway

Ignition

References · 3

• https://osv.dev/vulnerability/CVE-2020-14479 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14479 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-20-147-01 · Patch