Inductive Automation Ignition
view advisory published 2020-04-21
Successful exploitation of this vulnerability could allow an attacker to write endless log statements into the database, which could result in a denial-of-service condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10641US | high7.5OT elevated | — | ||
An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire av… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationIgnition 8 Gateway
For gateways that are deployed behind a web application firewall or reverse proxy, deploy a rule to deny access to all gateway HTTP requests that include the path: /data/perspective/print-to-log.
- FixedIgnition 8 Gateway
Upgrade Ignition 8 Gateway to v8.0.10
https://inductiveautomation.com/downloads/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan