CVE-2022-1264 MEDIUM

CVE-2022-1264: Inductive Automation Ignition

Vendor Inductive Automation
Product Ignition
Weakness CWE-22 · Path traversal
Published July 20, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

What the vulnerability does

01Description

The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code.

Key dates

02Disclosure timeline

July 20, 2022 CVE published
April 16, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-62424 ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write CVE-2026-46402 Microsoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directory CVE-2024-34033 Path Traversal vulnerability in Delta Electronics DIAEnergie CVE-2022-1721 Path Traversal in WellKnownServlet in jgraph/drawio CVE-2017-20184 Carlo Gavazzi Powersoft prone to Path Traversal