CVE-2021-3129

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2. Recent assessments: ccondon-r7...

Facade Ignition for Laravel Authorization Issues Vulnerability

Facade Ignition for Laravel is a customizable error page from Facade Belgium that runs in the Laravel web framework. An authorization issue vulnerability exists in Ignition for Laravel versions prior to 2.5.2, which stems from the program not properly authenticating, and can be exploited by an...

PT-2021-4652

Name of the Vulnerable Software and Affected Versions Ignition versions prior to 2.5.2 Laravel versions prior to 8.4.2 Description Unauthenticated remote attackers can execute arbitrary code due to insecure usage of the file get contents and file put contents functions. This issue is related to...

CVE-2021-3129: Undefined Security Weakness

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2...

Inductive Automation Ignition Insecure Deserialization (CVE-2020-12004; CVE-2020-10644)

An insecure deserialization vulnerability exists in Inductive Automation Ignition. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Ignition 8 Gateway Audit Log

The vulnerability of the Ignition 8 Gateway industrial automation software is related to the lack of restrictions on audit log entries. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Inductive Automation Ignition Authorization Issues Vulnerability

Inductive Automation Ignition is a data acquisition and monitoring system SCADA from Inductive Automation USA. A security vulnerability exists in Inductive Automation Ignition versions prior to 8 8.0.13. An attacker could exploit the vulnerability to obtain sensitive information...

CVE-2020-14520

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 all versions prior to 8.0.13...

CVE-2020-14520

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 all versions prior to 8.0.13...

Information disclosure

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 all versions prior to 8.0.13...

CVE-2020-14520

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 all versions prior to 8.0.13...

CVE-2020-14520

CVE-2020-14520 affects Inductive Automation Ignition 8 (all versions prior to 8.0.13). The reported vulnerability is missing authorization via an unprotected API, enabling information disclosure by issuing an HTTP request to determine if a given filesystem path exists. The ICS-CERT advisory cites...

PT-2020-14054

Name of the Vulnerable Software and Affected Versions Ignition 8 versions prior to 8.0.13 Description The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information. Recommendations For versions prior to 8.0.13, update to version 8.0.13 or...

CVE-2020-14520: Missing Authorization

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 all versions prior to 8.0.13...

Inductive Automation Ignition 8

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Inductive Automation Equipment: Ignition 8 Vulnerability: Missing Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive...

Inductive Automation Ignition - Remote Code Execution

This Metasploit module exploits a Java deserialization vulnerability in the Inductive Automation Ignition SCADA... This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Inductive Automation Ignition...

Inductive Automation Ignition Remote Code Execution Exploit

This Metasploit module exploits a Java deserialization vulnerability in the Inductive Automation Ignition SCADA product, versions 8.0.0 to and including 8.0.7. This exploit was tested on versions 8.0.0 and 8.0.7 on both Linux and Windows. The default configuration is exploitable by an...

Inductive Automation Ignition Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Inductive Automation Ignition Remote Code Execution', 'Description' = %q This module exploits a Java deserialization vulnerability in the Inducti...

Inductive Automation Ignition 8.x < 8.0.10 Multiple Vulnerabilities

Binary data scadainductiveautomationignition8010.nbin...

Inductive Automation Ignition Remote Code Execution

This module exploits a Java deserialization vulnerability in the Inductive Automation Ignition SCADA product, versions 8.0.0 to and including 8.0.7. This exploit was tested on versions 8.0.0 and 8.0.7 on both Linux and Windows. The default configuration is exploitable by an unauthenticated...