Skip to content
OpenAdvisories

Vendor

Inductive Automation

30 known vulnerabilities.

5 results · Clear filters · Feed

  • Medium 6.3

    Inductive Automation Ignition Software Deserialization of Untrusted Data

    A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.

  • Medium 6.4

    Inductive Automation Ignition Execution with Unnecessary Privileges

    Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges …

  • Medium 6.5

    Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability

    Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Inductive Automation Ignition. Authent…

  • Medium 6.8

    Inductive Automation Ignition

    The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code.

  • Medium 5.3

    ICSA-20-147-01 Inductive Automation Ignition (Update B)

    Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server