Lucene search
HistoryJul 16, 2022 - 7:15 p.m.
CVE-2022-36126
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.017 Low
EPSS
Percentile
87.9%
An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script.
Affected configurations
Node
inductiveautomationignitionRange<7.9.20
ORinductiveautomationignitionRange8.0.1–8.1.17
Related
cvelist
cvelist
CVE-2022-36126
2022-07-16 18:59:46
cve
cve
CVE-2022-36126
2022-07-16 19:15:08
srcincite
srcincite
prion
prion
Code injection
2022-07-16 19:15:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.017 Low
EPSS
Percentile
87.9%
Related for NVD:CVE-2022-36126