CVE-2022-36126
published 2022-07-16CVE-2022-36126: An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute…
PriorityP347high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
1.96%
77.9th percentile
An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| inductiveautomation | ignition | < 7.9.20 | 7.9.20 |
| inductiveautomation | ignition | >= 8.0.1 < 8.1.17 | 8.1.17 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/sourceincite/randyhttps://srcincite.io/advisories/src-2022-0014/https://support.inductiveautomation.com/hc/en-us/articles/7625759776653https://github.com/sourceincite/randyhttps://srcincite.io/advisories/src-2022-0014/https://support.inductiveautomation.com/hc/en-us/articles/7625759776653
2022-07-16
Published