CVEvulnerability

CVE-2020-10641

7.5 HIGH Published 2020-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-284, CWE-306

Description

An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway (versions prior to 8.0.10), causing a denial-of-service condition.

Affected configurations

• inductiveautomation ignition gateway (>= 8.0 < 8.0.10)

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness

References