Security Advisory

CVE-2020-12000

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-09 17:54:03

Last updated 2024-08-04 11:48:57

Assigner icscert

CVSS score not scored

State PUBLISHED

Description

The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.

← Browse all CVEs View on cve.org ↗