CVE-2020-14479 MEDIUM

CVE-2020-14479: ICSA-20-147-01 Inductive Automation Ignition (Update B)

Vendor Inductive Automation
Product Ignition 7 Gateway
Weakness CWE-306 · Missing auth
Published April 1, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server

Key dates

02Disclosure timeline

April 1, 2022 CVE published
April 16, 2025 Record updated