CVE-2020-12000CWE-502

The affected product is vulnerable to the handling of serialized data

published June 9, 2020

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01480 · 73.7th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2020-06-09T17:54Z
EPSS history
Timeline
  • 09 JUN 17:54Z
    The affected product is vulnerable to the handling of serialized data
    cvelistv5