漏洞描述
Inductive Automation Ignition是美国Inductive Automation公司的一套用于SCADA系统的集成软件平台。Inductive Automation Ignition中存在代码执行漏洞。此漏洞是由于Base64Element类对于用户上传的文件缺乏校验导致的。
Inductive Automation Ignition CVE-2023-50220 代码执行漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-3129: Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution
- POC CVE-2021-41291: ECOA Building Automation System - Directory Traversal Content Disclosure
- POC CVE-2021-41293: ECOA Building Automation System - Arbitrary File Retrieval
- POC CVE-2022-22972: VMware Workspace ONE Access/Identity Manager/vRealize Automation - Authentication Bypass
- POC CVE-2022-26833: Open Automation Software OAS Platform V16.00.0121 - Missing Authentication
- POC CVE-2024-6922: Automation Anywhere Automation 360 - Server-Side Request Forgery
- POC CVE-2024-9186: Automation By Autonami < 3.3.0 - SQL Injection
- POC CVE-2025-1562: Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control
- POC CVE-2025-3102: SureTriggers – All-in-One Automation Platform ≤ 1.0.78 - Authentication Bypass
- POC CVE-2020-21998: HomeAutomation 3.3.2 - Open Redirect
- POC tcpconfig: Rockwell Automation TCP/IP Configuration Information - Detect
- POC laravel-ignition-xss: Laravel Ignition - Cross-Site Scripting
- IBM Cloud Pak for Business Automation 跨站脚本漏洞