Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Inductiveautomation

First CVE: Apr 3, 2015Active for: 11 yearsTotal CVEs: 40
59.1
VTI Score
TOP TARGET

Inductive Automation develops industrial control and automation platforms centered on its Ignition product line, which serves as a supervisory control and data acquisition (SCADA) and manufacturing execution system widely deployed in critical infrastructure and factory environments. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes, reflecting the safety-critical and data-integrity demands of industrial automation software; the recurring exposure centers on deserialization of untrusted data, missing authentication for sensitive functions, exposure of configuration and operational data, path traversal, and cross-site scripting, classes that carry particular weight in networked control systems where authentication bypass and data leakage can cascade into operational disruption. The narrow product portfolio concentrates risk around the Ignition gateway and its associated ecosystem, meaning that a single vulnerability class can affect a large installed base across manufacturing, utility, and process-control deployments. Defenders in industrial and critical-infrastructure sectors should prioritize tracking this vendor's security advisories and apply patches expeditiously to systems exposed to untrusted networks, given the control-plane nature of affected products. Current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
40
Total CVEs
More Total CVEs than 98% of tracked vendors
4.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 95% of tracked vendors
7.7
Avg CVSS Score
Higher Avg CVSS Score than 73% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Inductiveautomation over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 3, 2015
11 years ago
Most Recent CVE
Mar 12, 2026
134 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (40 CVEs).

40 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2022-35869CRITICAL
This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required
Jul 25, 20229.863NONO
CVE-2023-39473HIGH
Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a
May 3, 20248.856NONO
CVE-2023-50223HIGH
Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb
May 3, 20248.855NONO
CVE-2023-50218HIGH
Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co
May 3, 20248.854NONO
CVE-2023-38124HIGH
Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
May 3, 20248.854NONO
CVE-2022-35871HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required
Jul 25, 20227.848NONO
CVE-2022-35870HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is req
Jul 25, 20227.848NONO
CVE-2020-12004HIGH
The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14)
Jun 9, 20207.542NOYES
CVE-2020-10644HIGH
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and I
Jun 9, 20207.538NOYES
CVE-2023-39475CRITICAL
Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attacke
May 3, 20249.830NONO
View all 40 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products40 CVEs
20%
63%
15%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local4 (10.0%)
Network29 (72.5%)
Unknown6 (15.0%)
Physical0 (0.0%)
Adjacent Network1 (2.5%)
Attack Complexity
Low34 (85.0%)
High0 (0.0%)
Unknown6 (15.0%)
User Interaction
None23 (57.5%)
Unknown6 (15.0%)
Required11 (27.5%)
Privileges Required
Low9 (22.5%)
High3 (7.5%)
None22 (55.0%)
Unknown6 (15.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (40 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
2 CVEs
5.0% of CVEs· 98th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Inductiveautomation.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Inductiveautomation — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Inductiveautomation's Products

View all 3 CNAs →

Top CWEs