Inductiveautomation

Ignition

37 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-77393

  • EPSS 0.51%
  • Veröffentlicht 04.09.2026 21:10:25
  • Zuletzt bearbeitet 08.09.2026 15:28:33

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition 8.1.54 restricts project creation to Designer sessio...

6.8

CVE-2025-13913

  • EPSS 0.35%
  • Veröffentlicht 12.03.2026 18:17:22
  • Zuletzt bearbeitet 05.06.2026 19:40:45

A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.

7.3

CVE-2025-13911

  • EPSS 0.25%
  • Veröffentlicht 18.12.2025 20:24:30
  • Zuletzt bearbeitet 28.08.2026 02:16:19

Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator...

8.8

CVE-2023-50233

  • EPSS 2.08%
  • Veröffentlicht 03.05.2024 03:16:12
  • Zuletzt bearbeitet 12.03.2025 13:52:14

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction...

8.8

CVE-2023-50232

  • EPSS 1.39%
  • Veröffentlicht 03.05.2024 03:16:12
  • Zuletzt bearbeitet 12.03.2025 14:02:20

Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is requi...

8.8

CVE-2023-50220

  • EPSS 1.85%
  • Veröffentlicht 03.05.2024 03:16:10
  • Zuletzt bearbeitet 12.03.2025 14:08:54

Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authen...

8.8

CVE-2023-50221

  • EPSS 1.15%
  • Veröffentlicht 03.05.2024 03:16:10
  • Zuletzt bearbeitet 12.03.2025 14:06:04

Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automat...

8.8

CVE-2023-50222

  • EPSS 1.15%
  • Veröffentlicht 03.05.2024 03:16:10
  • Zuletzt bearbeitet 12.03.2025 14:05:11

Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ig...

8.8

CVE-2023-50223

  • EPSS 55.18%
  • Veröffentlicht 03.05.2024 03:16:10
  • Zuletzt bearbeitet 12.03.2025 14:04:26

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition...

8.8

CVE-2023-50219

  • EPSS 1.5%
  • Veröffentlicht 03.05.2024 03:16:09
  • Zuletzt bearbeitet 12.03.2025 14:10:20

Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authenticat...