CVE-2020-10641
High
Description
An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway (versions prior to 8.0.10), causing a denial-of-service condition.
SeverityHigh
CVSS7.5
Exploit probability—
ProductInductiveautomation Ignition Gateway
PublishedApr 28, 2020
First seenApr 28, 2020
Weakness typeCWE-284Improper access control
How to fix
Update
- inductiveautomation ignition_gateway8.0.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inductiveautomation ignition_gateway | 8.0 ≤ v < 8.0.10 | 8.0.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.