Ignition

CVEs (36)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-35869	Inductiveautomation Ignition	Cri	0.69	9.8	0.60	Jul 25, 2022	This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within…
CVE-2023-39476	Inductiveautomation Ignition	Cri	0.64	9.8	0.02	May 3, 2024	Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not…
CVE-2023-39475	Inductiveautomation Ignition	Cri	0.64	9.8	0.64	May 3, 2024	Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition.…
CVE-2022-35890	Inductiveautomation Ignition	Cri	0.64	9.8	0.02	Jul 15, 2022	An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. Designer and Vision Client Session IDs are mishandled. An attacker can determine which session IDs were generated in the past and then hijack sessions assigned to these IDs via Randy.
CVE-2023-50223	Inductiveautomation Ignition	Hig	0.62	8.8	0.55	May 3, 2024	Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required…
CVE-2023-50218	Inductiveautomation Ignition	Hig	0.62	8.8	0.55	May 3, 2024	Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to…
CVE-2023-39473	Inductiveautomation Ignition	Hig	0.62	8.8	0.62	May 3, 2024	Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is…
CVE-2023-38124	Inductiveautomation Ignition	Hig	0.62	8.8	0.60	May 3, 2024	Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is…
CVE-2023-38121	Inductiveautomation Ignition	Cri	0.59	9.0	0.01	May 3, 2024	Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit…
CVE-2023-50233	Inductiveautomation Ignition	Hig	0.57	8.8	0.02	May 3, 2024	Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this…
CVE-2023-50232	Inductiveautomation Ignition	Hig	0.57	8.8	0.01	May 3, 2024	Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this…
CVE-2023-50222	Inductiveautomation Ignition	Hig	0.57	8.8	0.01	May 3, 2024	Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is…
CVE-2023-50221	Inductiveautomation Ignition	Hig	0.57	8.8	0.01	May 3, 2024	Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User…
CVE-2023-50220	Inductiveautomation Ignition	Hig	0.57	8.8	0.02	May 3, 2024	Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to…
CVE-2023-50219	Inductiveautomation Ignition	Hig	0.57	8.8	0.01	May 3, 2024	Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit…
CVE-2023-39474	Inductiveautomation Ignition	Hig	0.57	8.8	0.01	May 3, 2024	Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability…
CVE-2023-38123	Inductiveautomation Ignition	Hig	0.57	8.8	0.01	May 3, 2024	Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition. User interaction is…
CVE-2022-35871	Inductiveautomation Ignition	Hig	0.54	7.8	0.39	Jul 25, 2022	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within the authenticateAdSso method. The…
CVE-2022-35870	Inductiveautomation Ignition	Hig	0.54	7.8	0.43	Jul 25, 2022	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The…
CVE-2022-35873	Inductiveautomation Ignition	Hig	0.51	7.8	0.01	Jul 25, 2022	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious…

CVE-2022-35869CriJul 25, 2022
Inductiveautomation
Ignition
risk 0.69cvss 9.8epss 0.60
This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within…
CVE-2023-39476CriMay 3, 2024
Inductiveautomation
Ignition
risk 0.64cvss 9.8epss 0.02
Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not…
CVE-2023-39475CriMay 3, 2024
Inductiveautomation
Ignition
risk 0.64cvss 9.8epss 0.64
Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition.…
CVE-2022-35890CriJul 15, 2022
Inductiveautomation
Ignition
risk 0.64cvss 9.8epss 0.02
An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. Designer and Vision Client Session IDs are mishandled. An attacker can determine which session IDs were generated in the past and then hijack sessions assigned to these IDs via Randy.
CVE-2023-50223HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.62cvss 8.8epss 0.55
Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required…
CVE-2023-50218HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.62cvss 8.8epss 0.55
Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to…
CVE-2023-39473HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.62cvss 8.8epss 0.62
Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is…
CVE-2023-38124HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.62cvss 8.8epss 0.60
Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is…
CVE-2023-38121CriMay 3, 2024
Inductiveautomation
Ignition
risk 0.59cvss 9.0epss 0.01
Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit…
CVE-2023-50233HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.57cvss 8.8epss 0.02
Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this…
CVE-2023-50232HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.57cvss 8.8epss 0.01
Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this…
CVE-2023-50222HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.57cvss 8.8epss 0.01
Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is…
CVE-2023-50221HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.57cvss 8.8epss 0.01
Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User…
CVE-2023-50220HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.57cvss 8.8epss 0.02
Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to…
CVE-2023-50219HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.57cvss 8.8epss 0.01
Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit…
CVE-2023-39474HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.57cvss 8.8epss 0.01
Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability…
CVE-2023-38123HigMay 3, 2024
Inductiveautomation
Ignition
risk 0.57cvss 8.8epss 0.01
Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition. User interaction is…
CVE-2022-35871HigJul 25, 2022
Inductiveautomation
Ignition
risk 0.54cvss 7.8epss 0.39
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within the authenticateAdSso method. The…
CVE-2022-35870HigJul 25, 2022
Inductiveautomation
Ignition
risk 0.54cvss 7.8epss 0.43
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The…
CVE-2022-35873HigJul 25, 2022
Inductiveautomation
Ignition
risk 0.51cvss 7.8epss 0.01
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious…

Page 1 of 2