Inductive Automation Ignition
Advisory ansehen veröffentlicht 2020-04-21
Successful exploitation of this vulnerability could allow an attacker to write endless log statements into the database, which could result in a denial-of-service condition.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-10641US | high7.5OT erhöht | — | ||
An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire av… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- MitigationIgnition 8 Gateway
For gateways that are deployed behind a web application firewall or reverse proxy, deploy a rule to deny access to all gateway HTTP requests that include the path: /data/perspective/print-to-log.
- BehobenIgnition 8 Gateway
Upgrade Ignition 8 Gateway to v8.0.10
https://inductiveautomation.com/downloads/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan