Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Ignition — Vulnerabilities & Security Advisories 26

All 26 CVE vulnerabilities found in Ignition, with AI-generated Chinese analysis, references, and POCs.

Vendor: Inductive Automation

CVE IDTitleCVSSSeverityPublished
CVE-2025-13911 Inductive Automation Ignition Execution with Unnecessary Privileges CWE-250 6.4 Medium2025-12-18
CVE-2023-50233 Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability CWE-22 8.8 -2024-05-03
CVE-2023-50232 Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability CWE-88 8.8 -2024-05-03
CVE-2023-50223 Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 -2024-05-03
CVE-2023-50222 Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 -2024-05-03
CVE-2023-50221 Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 -2024-05-03
CVE-2023-50220 Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 -2024-05-03
CVE-2023-50219 Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 -2024-05-03
CVE-2023-50218 Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 -2024-05-03
CVE-2023-39477 Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability CWE-400 7.5 -2024-05-03
CVE-2023-39476 Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 9.8 -2024-05-03
CVE-2023-39474 Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability CWE-494 7.8 -2024-05-03
CVE-2023-39475 Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 9.8 -2024-05-03
CVE-2023-39473 Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 -2024-05-03
CVE-2023-39472 Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability CWE-611 6.5 -2024-05-03
CVE-2023-38123 Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability CWE-306 8.8 -2024-05-03
CVE-2023-38124 Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability CWE-749 8.8 -2024-05-03
CVE-2023-38122 Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability CWE-942 8.8 -2024-05-03
CVE-2023-38121 Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability CWE-79 9.6 -2024-05-03
CVE-2022-1704 Inductive Automation Ignition CWE-611 7.6 High2022-08-05
CVE-2022-35873 Inductive Automation Ignition 代码注入漏洞 CWE-356 7.8 -2022-07-25
CVE-2022-35872 Inductive Automation Ignition 代码问题漏洞 CWE-502 7.8 -2022-07-25
CVE-2022-35871 Inductive Automation Ignition 访问控制错误漏洞 CWE-306 8.4 -2022-07-25
CVE-2022-35870 Inductive Automation Ignition 代码问题漏洞 CWE-502 8.4 -2022-07-25
CVE-2022-35869 Inductive Automation Ignition授权问题漏洞 CWE-288 9.8 -2022-07-25
CVE-2022-1264 Inductive Automation Ignition CWE-22 6.8 Medium2022-07-20

All 26 known CVE vulnerabilities affecting Ignition with full Chinese analysis, references, and POCs where available.