CVE-2025-13913

Опубликовано: 12 мар. 2026

Источник: nvd

CVSS3: 6.3

CVSS3: 6.8

EPSS Низкий

Описание

A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.

Ссылки

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-071-06.json
Issue Tracking
https://inductiveautomation.com/resources/article/ignition-security-hardening-guide
Issue Tracking
https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-06
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:inductiveautomation:ignition:*:*:*:*:*:*:*:*

Версия до 8.3.0 (исключая)

EPSS

Процентиль: 27%

0.00345

Низкий

6.3 Medium

CVSS3

6.8 Medium

CVSS3

Дефекты

CWE-502

Связанные уязвимости

GHSA-439v-7mv7-5p44

CVSS3: 6.3

github

6 месяцев назад

Inductive Automation Ignition Software is vulnerable to an unauthenticated API endpoint exposure that may allow an attacker to remotely change the "forgot password" recovery email address.

EPSS

Процентиль: 27%

0.00345

Низкий

6.3 Medium

CVSS3

6.8 Medium

CVSS3

Дефекты

CWE-502