Skip to content
OpenAdvisories

Vendor

Inductive Automation

30 known vulnerabilities.

Products

Ignition 28 Ignition Software 1 Ignition 7 Gateway 1 Ignition 8 Gateway 1 Ignition 8 0
All Critical High Medium Low Exploited only Public exploit

23 results · Clear filters · Feed

  • High 8.8
    CVE-2026-92817

    Inductive Automation Ignition Software Incorrect Authorization

    The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges.…

    Inductive Automation Ignition
  • High 8.8
    CVE-2026-77393

    Inductive Automation Ignition Incorrect Default Permissions

    In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition 8.1.54 restricts project creation to Designer sessions and no…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50233

    Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability

    Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is requi…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50232

    Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability

    Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to ex…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50223 EPSS 55%

    Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authent…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50222

    Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. U…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50221

    Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignit…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50219

    Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is re…

    Inductive Automation Ignition
  • High 7.2
    CVE-2023-50220

    Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication …

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50218 EPSS 55%

    Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication i…

    Inductive Automation Ignition
  • High 7.5
    CVE-2023-39477

    Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

    Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Inductive Automation Ignition. Authentication i…

    Inductive Automation Ignition
  • High 8.0
    CVE-2023-39474

    Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability

    Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-39473 EPSS 62%

    Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authe…

    Inductive Automation Ignition
  • High 7.2
    CVE-2023-38124 EPSS 60%

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. …

    Inductive Automation Ignition
  • High 7.2
    CVE-2023-38122

    Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability

    Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Although aut…

    Inductive Automation Ignition
  • High 7.5
    CVE-2023-38123

    Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability

    Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition.…

    Inductive Automation Ignition
  • High 8.3
    CVE-2023-38121

    Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability

    Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is re…

    Inductive Automation Ignition
  • High 7.6
    CVE-2022-1704

    Inductive Automation Ignition

    Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.

    Inductive Automation Ignition
  • High 7.8
    CVE-2022-35873

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 7.8
    CVE-2022-35872

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 8.1
    CVE-2022-35871 EPSS 41%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 8.8
    CVE-2022-35870 EPSS 44%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 7.5
    CVE-2022-35869 EPSS 60%

    This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation I…

    Inductive Automation Ignition