CVE-2020-14479 — ICSA-20-147-01 Inductive Automation Ignition (Update B)

CVE-2020-14479

ICSA-20-147-01 Inductive Automation Ignition (Update B) PUBLISHED

Description (CNA)

Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server

Affected (CNA)

Vendor / product	Versions
Inductive Automation / Ignition 7 Gateway	affected All before 7.9.14
Inductive Automation / Ignition 8 Gateway	affected All before 8.0.10

CWE

CWE-306

References

https://www.cisa.gov/uscert/ics/advisories/icsa-20-147-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-20-147-01

CISA-ADP

No English description supplied.

No references supplied.