Vulnerabilities

TI-2023-27465 CVE-2023-50233 · GHSA-pxh7-6hfh-c7c3

Path traversal in Inductive Automation Ignition

MEDIUM 44

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02081 Published 2024-05-03 No fix listed CWE-22

TI-2023-27464 CVE-2023-50232 · GHSA-xmm9-72fg-hp8m

MEDIUM 43

Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01386 Published 2024-05-03 No fix listed CWE-88

TI-2023-27455 CVE-2023-50223 · GHSA-5pph-5q99-2fx3

HIGH 73

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.54899 Published 2024-05-03 No fix listed CWE-502

TI-2023-27454 CVE-2023-50222 · GHSA-x27c-c67r-r9cv

MEDIUM 42

Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01145 Published 2024-05-03 No fix listed CWE-502

TI-2023-27453 CVE-2023-50221 · GHSA-84p4-pmqg-8955

MEDIUM 42

Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01145 Published 2024-05-03 No fix listed CWE-502

TI-2023-27452 CVE-2023-50220 · GHSA-q4wh-ggfg-f2hj

MEDIUM 44

Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01846 Published 2024-05-03 No fix listed CWE-502

TI-2023-27451 CVE-2023-50219 · GHSA-7x3x-hpgm-xpw8

MEDIUM 43

Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01501 Published 2024-05-03 No fix listed CWE-502

TI-2023-27450 CVE-2023-50218 · GHSA-pmq8-wchc-9p3r

HIGH 73

Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.55031 Published 2024-05-03 No fix listed CWE-502