Inductive Automation Ignition Software
Summary
A critical vulnerability (CVE-2026-92817) has been identified in Inductive Automation Ignition Software, versions 8.1.0 through 8.1.54 and 8.3.0 through 8.3.8. Successful exploitation allows an authenticated low-level user to escalate privileges and potentially execute arbitrary code on the Ignition Gateway process.
IFF Assessment
This vulnerability allows for privilege escalation and arbitrary code execution, posing a significant risk to the affected systems and critical infrastructure.
Severity
The CVSS score of 8.8 indicates a High severity vulnerability. The 'Incorrect Authorization' flaw allows an authenticated user to gain Designer-level privileges and execute arbitrary code, indicating a significant attack vector and impact.
Defender Context
This advisory highlights a critical vulnerability in Ignition Software, widely used in critical infrastructure sectors like Energy and Manufacturing. Defenders must prioritize patching or applying mitigations to affected versions to prevent unauthorized access and potential code execution within their OT environments.