Lucene search
+L

7 matches found

attackerkb
attackerkb
•added 2024/05/03 3:15 a.m.•14 views

CVE-2023-39474

Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS8.1AI score0.00616EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/03 3:15 a.m.•51 views

CVE-2023-39474

Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS8.2AI score0.00616EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/05/03 3:15 a.m.•23 views

CVE-2023-39474

Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS8.1AI score0.00616EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/03 2:10 a.m.•90 views

CVE-2023-39474

CVE-2023-39474 (Inductive Automation Ignition) affects the Ignition platform, specifically the downloadLaunchClientJar function. The flaw is due to loading a remote JAR without validating it, enabling a remote attacker to execute arbitrary code in the context of the current user. Exploitation req...

8.8CVSS8.1AI score0.00616EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•10 views

CVE-2023-39474: Download of Code Without Integrity Check

Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS8.1AI score0.00616EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•21 views

Inductive Automation Ignition security vulnerability

Inductive Automation Ignition is an integrated software platform for SCADA systems from Inductive Automation, USA. The platform supports SCADA Data Acquisition and Monitoring Systems, HMI Human Machine Interface, and more. A security vulnerability exists in Inductive Automation Ignition that stem...

8.8CVSS7.9AI score0.00616EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/08/08 12:00 a.m.•45 views

(0Day) Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must connect to a malicious server. The specific flaw exists within the...

8CVSS8AI score0.00616EPSS
SaveExploits0
Rows per page
Query Builder