İçeriğe atla
Noroxi

inductiveautomation kayıtları

inductiveautomation üreticisine ait 40 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 2 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %5
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 20
  2. 22
  3. 24
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

40 kayıt
  • CVE-2020-10644
    60Bu hafta

    The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8

    YüksekCVSS 7,5SilahlaştırılmışEPSS %20

    inductiveautomation · ignition gateway9 Haz 2020

  • CVE-2020-12004
    60Bu hafta

    The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignit

    YüksekCVSS 7,5SilahlaştırılmışEPSS %13

    inductiveautomation · ignition gateway9 Haz 2020

  • CVE-2023-39475
    58Planlayın

    Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %64

    inductiveautomation · ignition2 May 2024

  • CVE-2022-35869
    57Planlayın

    This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022

    KritikCVSS 9,8İstismar yokEPSS %59

    inductiveautomation · ignition25 Tem 2022

  • CVE-2023-39473
    54Planlayın

    Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %62

    inductiveautomation · ignition2 May 2024

  • CVE-2023-38124
    53Planlayın

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %59

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50218
    52Planlayın

    Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %55

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50223
    51Planlayın

    Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %54

    inductiveautomation · ignition2 May 2024

  • CVE-2022-35870
    44Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    YüksekCVSS 7,8İstismar yokEPSS %44

    inductiveautomation · ignition25 Tem 2022

  • CVE-2022-35871
    43Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    YüksekCVSS 7,8İstismar yokEPSS %40

    inductiveautomation · ignition25 Tem 2022

  • CVE-2023-39476
    40Planlayın

    Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %2

    inductiveautomation · ignition2 May 2024

  • CVE-2022-35890
    40Planlayın

    An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17.

    KritikCVSS 9,8İstismar yokEPSS %1

    inductiveautomation · ignition15 Tem 2022

  • CVE-2022-1704
    39İzleyin

    Inductive Automation Ignition

    KritikCVSS 9,8İstismar yokEPSS %1

    inductiveautomation · ignition5 Ağu 2022

  • CVE-2023-50233
    36İzleyin

    Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %2

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50220
    36İzleyin

    Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    inductiveautomation · ignition2 May 2024

  • CVE-2023-38121
    36İzleyin

    Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability

    KritikCVSS 9,0İstismar yokEPSS %1

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50219
    35İzleyin

    Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50232
    35İzleyin

    Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    inductiveautomation · ignition2 May 2024

  • CVE-2023-38123
    35İzleyin

    Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50221
    35İzleyin

    Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    inductiveautomation · ignition2 May 2024

  • CVE-2023-50222
    35İzleyin

    Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    inductiveautomation · ignition2 May 2024

  • CVE-2022-1264
    35İzleyin

    Inductive Automation Ignition

    YüksekCVSS 8,8İstismar yokEPSS %0

    inductiveautomation · ignition20 Tem 2022

  • CVE-2023-39474
    35İzleyin

    Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    inductiveautomation · ignition2 May 2024

  • CVE-2022-35873
    31İzleyin

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    YüksekCVSS 7,8İstismar yokEPSS %0

    inductiveautomation · ignition25 Tem 2022

  • CVE-2022-35872
    31İzleyin

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    YüksekCVSS 7,8İstismar yokEPSS %0

    inductiveautomation · ignition25 Tem 2022