CVE-2015-0994
published 2015-04-03CVE-2015-0994: Inductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force protection mechanism by using different session ID values in a…
PriorityP418medium4CVSS 2.0
AVNACLAuSCNIPAN
EPSS
1.34%
67.7th percentile
Inductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force protection mechanism by using different session ID values in a series of HTTP requests.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| inductiveautomation | ignition | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4pxc-x6cm-mjjv: Inductive Automation Ignition 7
ghsa_unreviewed·2022-05-17
CVE-2015-0994 [MEDIUM] GHSA-4pxc-x6cm-mjjv: Inductive Automation Ignition 7
Inductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force protection mechanism by using different session ID values in a series of HTTP requests.
CISA ICS
Inductive Automation Ignition Vulnerabilities
cisa_ics·2018-08-27
Inductive Automation Ignition Vulnerabilities
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Inductive Automation Ignition Vulnerabilities
Last RevisedAugust 27, 2018
Alert CodeICSA-15-090-01
## OVERVIEW
Evgeny Druzhinin, Alexey Osipov, Ilya Karpov, and Gleb Gritsai of Positive Technologies have identified several vulnerabilities in Inductive Automation’s Ignition Software. Inductive Automation has produced a patch that mitigates these vulnerabilities.
These vulnerabilities could be exploited remotely.
## AFFECTED PRODUCTS
The following Inductive Automation product is affected:
- Inductive Automation Ignition 7.7.2
## IMPACT
Impact to individual organizations depe
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-04-03
Published