Code injection

2022-07-1619:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%

JSON

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script.

CPENameOperatorVersion
ignitionlt7.9.20
ignitionge8.0.1
ignitionlt8.1.17

Name	Operator	Version
ignition	lt	7.9.20
ignition	ge	8.0.1
ignition	lt	8.1.17

References

github.com/sourceincite/randy

srcincite.io/advisories/src-2022-0014/

support.inductiveautomation.com/hc/en-us/articles/7625759776653