Skip to content
Noroxi

inductiveautomation records

40 published records for vendor inductiveautomation. 0 of them have been exploited in the wild (listed in CISA KEV) and 2 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 5%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 20
  2. 22
  3. 24
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

40 records
  • CVE-2020-10644
    60This week

    The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8

    HighCVSS 7.5WeaponizedEPSS 20%

    inductiveautomation · ignition gatewayJun 9, 2020

  • CVE-2020-12004
    60This week

    The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignit

    HighCVSS 7.5WeaponizedEPSS 13%

    inductiveautomation · ignition gatewayJun 9, 2020

  • CVE-2023-39475
    58Plan

    Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 64%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2022-35869
    57Plan

    This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022

    CriticalCVSS 9.8No exploitEPSS 59%

    inductiveautomation · ignitionJul 25, 2022

  • CVE-2023-39473
    54Plan

    Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 62%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-38124
    53Plan

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 59%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50218
    52Plan

    Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 55%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50223
    51Plan

    Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 54%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2022-35870
    44Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    HighCVSS 7.8No exploitEPSS 44%

    inductiveautomation · ignitionJul 25, 2022

  • CVE-2022-35871
    43Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    HighCVSS 7.8No exploitEPSS 40%

    inductiveautomation · ignitionJul 25, 2022

  • CVE-2023-39476
    40Plan

    Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2022-35890
    40Plan

    An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17.

    CriticalCVSS 9.8No exploitEPSS 1%

    inductiveautomation · ignitionJul 15, 2022

  • CVE-2022-1704
    39Monitor

    Inductive Automation Ignition

    CriticalCVSS 9.8No exploitEPSS 1%

    inductiveautomation · ignitionAug 5, 2022

  • CVE-2023-50233
    36Monitor

    Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 2%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50220
    36Monitor

    Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-38121
    36Monitor

    Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability

    CriticalCVSS 9.0No exploitEPSS 1%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50219
    35Monitor

    Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50232
    35Monitor

    Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-38123
    35Monitor

    Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50221
    35Monitor

    Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-50222
    35Monitor

    Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2022-1264
    35Monitor

    Inductive Automation Ignition

    HighCVSS 8.8No exploitEPSS 0%

    inductiveautomation · ignitionJul 20, 2022

  • CVE-2023-39474
    35Monitor

    Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2022-35873
    31Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    HighCVSS 7.8No exploitEPSS 0%

    inductiveautomation · ignitionJul 25, 2022

  • CVE-2022-35872
    31Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    HighCVSS 7.8No exploitEPSS 0%

    inductiveautomation · ignitionJul 25, 2022