Inductive Automation

Records43All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

Inductive Automation records in CISA KEV

No Inductive Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ignition 35 records HIGH Ignition Gateway 5 records MEDIUM

Records

35 records in Ignition · all components

TI-2023-20607 CVE-2023-39475 · GHSA-5w76-2v5j-77r4

Deserialization of untrusted data in Inductive Automation Ignition

HIGH 84

Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.64076 Published 2024-05-03 No fix listed CWE-502

TI-2023-20608 CVE-2023-39476 · GHSA-7w2x-66hx-wq92

Deserialization of untrusted data in Inductive Automation Ignition

HIGH 82

Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02233 Published 2024-05-03 No fix listed CWE-502

TI-2022-16300 CVE-2022-35869 · GHSA-rmf7-vj4c-j2c9

Authentication bypass in Inductive Automation Ignition

HIGH 76

This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.59896 Published 2022-07-25 No fix listed CWE-288

TI-2023-20605 CVE-2023-39473 · GHSA-87mw-775v-8cmr

Deserialization of untrusted data in Inductive Automation Ignition

HIGH 75

Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.62482 Published 2024-05-03 No fix listed CWE-502

TI-2023-19548 CVE-2023-38124 · GHSA-fj6x-xhq4-hq99

Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous…

HIGH 74

Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.59609 Published 2024-05-03 No fix listed CWE-749

TI-2023-27455 CVE-2023-50223 · GHSA-5pph-5q99-2fx3

Deserialization of untrusted data in Inductive Automation Ignition

HIGH 73

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.54899 Published 2024-05-03 No fix listed CWE-502

TI-2023-27450 CVE-2023-50218 · GHSA-pmq8-wchc-9p3r

Deserialization of untrusted data in Inductive Automation Ignition

HIGH 73

Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.55031 Published 2024-05-03 No fix listed CWE-502

TI-2022-16301 CVE-2022-35870 · GHSA-9rc3-8phx-mfxx

Deserialization of untrusted data in Inductive Automation Ignition

MEDIUM 63

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.44285 Published 2022-07-25 No fix listed CWE-502

TI-2022-16302 CVE-2022-35871 · GHSA-r5vj-595h-w86q

Missing authentication in Inductive Automation Ignition

MEDIUM 62

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.40987 Published 2022-07-25 No fix listed CWE-306

TI-2022-16320 CVE-2022-35890 · GHSA-v987-5jrj-j3xx

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before…

MEDIUM 46

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01973 Published 2022-07-15 No fix listed CWE-863

TI-2023-27465 CVE-2023-50233 · GHSA-pxh7-6hfh-c7c3

Path traversal in Inductive Automation Ignition

MEDIUM 44

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02081 Published 2024-05-03 No fix listed CWE-22

TI-2023-27452 CVE-2023-50220 · GHSA-q4wh-ggfg-f2hj

Deserialization of untrusted data in Inductive Automation Ignition

MEDIUM 44

Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01846 Published 2024-05-03 No fix listed CWE-502

TI-2022-01570 CVE-2022-1704 · GHSA-wj9q-g585-77cq

XML external entity injection in Inductive Automation Ignition

MEDIUM 44

Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01034 Published 2022-08-05 Fixed in 7.9.21 CWE-611

TI-2023-27464 CVE-2023-50232 · GHSA-xmm9-72fg-hp8m

Inductive Automation Ignition getParams Argument Injection Remote Code Execution…

MEDIUM 43

Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-88

TI-2023-27451 CVE-2023-50219 · GHSA-7x3x-hpgm-xpw8

Deserialization of untrusted data in Inductive Automation Ignition

MEDIUM 43

Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01501 Published 2024-05-03 No fix listed CWE-502

TI-2023-19545 CVE-2023-38121 · GHSA-f526-9q5m-qh6g

Cross-site scripting in Inductive Automation Ignition

MEDIUM 43

Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01239 Published 2024-05-03 No fix listed CWE-79

TI-2023-27454 CVE-2023-50222 · GHSA-x27c-c67r-r9cv

Deserialization of untrusted data in Inductive Automation Ignition

MEDIUM 42

Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01145 Published 2024-05-03 No fix listed CWE-502

TI-2023-27453 CVE-2023-50221 · GHSA-84p4-pmqg-8955

Deserialization of untrusted data in Inductive Automation Ignition

MEDIUM 42

Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01145 Published 2024-05-03 No fix listed CWE-502

TI-2023-20609 CVE-2023-39477 · GHSA-g752-372v-qjj2

Uncontrolled resource consumption in Inductive Automation Ignition

MEDIUM 42

Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01538 Published 2024-05-03 No fix listed CWE-400

TI-2023-19547 CVE-2023-38123 · GHSA-qmh2-7rwj-4vp8

Missing authentication in Inductive Automation Ignition

MEDIUM 42

Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01166 Published 2024-05-03 No fix listed CWE-306

TI-2023-20606 CVE-2023-39474 · GHSA-jxgg-x4q8-f464

Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability

MEDIUM 41

Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00616 Published 2024-05-03 No fix listed CWE-494

TI-2022-01149 CVE-2022-1264 · GHSA-q2p6-q4x9-rcrf

Path traversal in Inductive Automation Ignition

MEDIUM 40

The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00969 Published 2022-07-20 No fix listed CWE-22

TI-2023-19546 CVE-2023-38122 · GHSA-2rcm-9pw5-qh2h

Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote…

LOW 37

Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01875 Published 2024-05-03 No fix listed CWE-942

TI-2022-16549 CVE-2022-36126 · GHSA-p63h-vpc2-p933

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before…

LOW 37

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02676 Published 2022-07-16 No fix listed CWE-863

TI-2022-16304 CVE-2022-35873 · GHSA-6hm7-67pg-crfx

This vulnerability allows remote attackers to execute arbitrary code on affected…

LOW 35

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00707 Published 2022-07-25 No fix listed CWE-356

Open these records in search →