CVE-2022-1264CWE-22

Inductive Automation Ignition

Medium · published July 20, 2022

CVSS v3.1
6.8
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00969 · 61.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-07-20T15:34Z
EPSS history
Timeline
  • 20 JUL 15:34Z
    Inductive Automation Ignition
    cvelistv5