Vulnerabilities

TI-2023-19548 CVE-2023-38124 · GHSA-fj6x-xhq4-hq99

Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous…

HIGH 74

Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.59609 Published 2024-05-03 No fix listed CWE-749

TI-2023-19547 CVE-2023-38123 · GHSA-qmh2-7rwj-4vp8

MEDIUM 42

Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01166 Published 2024-05-03 No fix listed CWE-306

TI-2023-19546 CVE-2023-38122 · GHSA-2rcm-9pw5-qh2h

LOW 37

Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01875 Published 2024-05-03 No fix listed CWE-942

TI-2023-19545 CVE-2023-38121 · GHSA-f526-9q5m-qh6g

MEDIUM 43

Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01239 Published 2024-05-03 No fix listed CWE-79