← voltar
CVE-2020-10644CWE-502

CVE-2020-10644

23Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 20%
da publicação à arma2 dias
Publicada no NVD9 de jun.
metasploit+2d
probabilidade de exploração
20%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
Produtos afetados
n/a · Ignition 8 Gateway