Lucene search
+L

310 matches found

BDU FSTEC
BDU FSTEC
added 2024/01/15 12:00 a.m.12 views

The vulnerability of the RunQuery class in industrial automation software, Inductive Automation Ignition, allows a perpetrator to execute arbitrary code.

The vulnerability of Inductive Automation Ignition’s software for industrial automation lies in the shortcomings of its deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.1AI score0.01501EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/15 12:00 a.m.10 views

The vulnerability of the ExtendedDocumentCodec class in the industrial automation software suite Inductive Automation Ignition allows a perpetrator to execute arbitrary code.

The vulnerability of the ExtendedDocumentCodec class in Inductive Automation Ignition software relates to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.1AI score0.55177EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2024/01/05 12:00 a.m.24 views

Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must connect to a malicious server. The specific flaw exists within the ResponseParser...

8.8CVSS7.5AI score0.01145EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/05 12:00 a.m.36 views

Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability. The specific flaw exists within the Base64Element class. The issue results from the lack of proper validation ...

7.2CVSS7.8AI score0.01846EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/05 12:00 a.m.30 views

Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must connect to a malicious server. The specific flaw exists within the ResponseParser...

8.8CVSS7.5AI score0.01145EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/05 12:00 a.m.25 views

Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability. The specific flaw exists within the RunQuery class. The issue results from the lack of proper validation of...

8.8CVSS7.8AI score0.01501EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/05 12:00 a.m.30 views

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability. The specific flaw exists within the ExtendedDocumentCodec class. The issue results from the lack of proper...

8.8CVSS7.8AI score0.55177EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.13 views

The vulnerability in the web server software for Inductive Automation Ignition allows a perpetrator to execute arbitrary code.

The vulnerability of Inductive Automation Ignition’s web server software-related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the target system or cause service failures...

8.3CVSS7.6AI score0.59609EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.15 views

The vulnerability in the web interface of Inductive Automation Ignition software allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of Inductive Automation Ignition’s software for industrial automation is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

8.3CVSS7.2AI score0.01239EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/15 12:00 a.m.13 views

The vulnerability of the JavaSerializationCodec class in the SCADA system of Inductive Automation Ignition allows a perpetrator to execute arbitrary code with privileges of SYSTEM.

The vulnerability of the JavaSerializationCodec class in the SCADA system of Inductive Automation Ignition is related to errors during data serialization. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with SYSTEM privileges...

10CVSS8.2AI score0.02204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/09 12:00 a.m.13 views

PT-2023-8251 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to the Base64Element class in Inductive Automation Ignition, which has flaws in its deserialization mechanism. This allows remote attackers to...

8.8CVSS7.9AI score0.01846EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/08/09 12:00 a.m.6 views

PT-2023-8253 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to the deserialization mechanism in the RunQuery class of Inductive Automation Ignition, allowing remote attackers to execute arbitrary code on...

9CVSS7.8AI score0.01501EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.13 views

PT-2023-4337 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to errors in data serialization within the JavaSerializationCodec class of Inductive Automation Ignition. This allows remote attackers to execute...

9.8CVSS9.6AI score0.02204EPSS
SaveExploits0References15
Zero Day Initiative
Zero Day Initiative
added 2023/08/08 12:00 a.m.44 views

(0Day) Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability. The specific flaw exists within the JavaSerializationCodec class. The issue results from the lack of prope...

9.8CVSS7.4AI score0.02204EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/08/08 12:00 a.m.29 views

(0Day) Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must connect to a malicious server. The specific flaw exists within the...

8CVSS7.1AI score0.00616EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.8 views

PT-2023-4356 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. The specific flaw exists within the...

9CVSS7.6AI score0.62071EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2023/08/08 12:00 a.m.33 views

(0Day) Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ParameterVersionJavaSerializationCodec class. The issue results from t...

9.8CVSS7.4AI score0.64076EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.16 views

PT-2023-26962 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. The specific flaw exists within the...

8.8CVSS7.3AI score0.00616EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.14 views

PT-2023-26961 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Inductive Automation Ignition. Authentication is required to exploit...

6.5CVSS6.6AI score0.01316EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.9 views

PT-2023-4355 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to the ParameterVersionJavaSerializationCodec class in Inductive Automation Ignition, which is associated with weaknesses in the authentication...

10CVSS9.7AI score0.64076EPSS
SaveExploits0References10
Rows per page
Query Builder