Priority LOW 27
A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.
CVSS 4.0MEDIUM 5.4· Adjacent network · High privileges · User interaction · EPSS 0.00383 · Published 2026-03-12 · Fixed in 8.3.0 CWE-502
Priority MEDIUM 44
Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02081 · Published 2024-05-03 · No fix listed CWE-22
Priority MEDIUM 43
Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01386 · Published 2024-05-03 · No fix listed CWE-88
Priority HIGH 73
Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.54899 · Published 2024-05-03 · No fix listed CWE-502
Priority MEDIUM 42
Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01145 · Published 2024-05-03 · No fix listed CWE-502
Priority MEDIUM 42
Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01145 · Published 2024-05-03 · No fix listed CWE-502
Priority MEDIUM 44
Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01846 · Published 2024-05-03 · No fix listed CWE-502
Priority MEDIUM 43
Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01501 · Published 2024-05-03 · No fix listed CWE-502
Priority HIGH 73
Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.55031 · Published 2024-05-03 · No fix listed CWE-502
Priority MEDIUM 42
Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01538 · Published 2024-05-03 · No fix listed CWE-400
Priority HIGH 82
Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02233 · Published 2024-05-03 · No fix listed CWE-502
Priority HIGH 84
Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.64076 · Published 2024-05-03 · No fix listed CWE-502
Priority MEDIUM 41
Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00616 · Published 2024-05-03 · No fix listed CWE-494
Priority HIGH 75
Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.62482 · Published 2024-05-03 · No fix listed CWE-502
Priority LOW 32
Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01316 · Published 2024-05-03 · No fix listed CWE-611
Priority HIGH 74
Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.59609 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 42
Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01166 · Published 2024-05-03 · No fix listed CWE-306
Priority LOW 37
Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01875 · Published 2024-05-03 · No fix listed CWE-942
Priority MEDIUM 43
Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.01239 · Published 2024-05-03 · No fix listed CWE-79
Priority MEDIUM 44
Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01034 · Published 2022-08-05 · Fixed in 7.9.21 CWE-611
Priority LOW 35
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00707 · Published 2022-07-25 · No fix listed CWE-356
Priority LOW 35
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00696 · Published 2022-07-25 · No fix listed CWE-502
Priority MEDIUM 62
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.40987 · Published 2022-07-25 · No fix listed CWE-306
Priority MEDIUM 63
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.44285 · Published 2022-07-25 · No fix listed CWE-502
Priority HIGH 76
This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.59896 · Published 2022-07-25 · No fix listed CWE-288
Load more
THREATIST.IORead the docs