Inductive Automation Ignition (Update A)

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to be granted direct SYSTEM-level code execution on the host operating system running the Ignition Gateway service on Windows systems.

CVEs (1)

Remediations

• Inductive Automation encourages users to do the following in order to reduce the risk of this vulnerability:
• Mitigation guidance covering OS-level service account hardening for both Windows and Linux is available in Annex A of the Ignition Security Hardening Guide. Application-level controls under a default installation are in development.
• For more information and updates, users should refer to Inductive Automation's Trust Portal.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing, Energy, Information Technology