high7.2
CVE-2022-36126
An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17.
Impact
An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inductiveautomation | Ignition | before 7.9.20 from 8.0.1 before 8.1.17 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/sourceincite/randy
- https://srcincite.io/advisories/src-2022-0014/
- https://support.inductiveautomation.com/hc/en-us/articles/7625759776653
- https://github.com/sourceincite/randy
- https://srcincite.io/advisories/src-2022-0014/
- https://support.inductiveautomation.com/hc/en-us/articles/7625759776653