Ignition

Restoring Trust: A Code-Execution Story in Ignition Gateway Backups I spend most of my time inside Inductive Automation’s Ignition platform. Years of integration work will do that — you get to know a system’s habits, the places it trusts input a little too readily, the seams where convenience and security pull in opposite directions. Lately I’ve been pointing that familiarity in a different direction: instead of building on Ignition, I’ve been probing it. This is the story of one of those probes, and of a disclosure process that worked the way it’s supposed to. ...

Introduction Ignition by Inductive Automation is one of the most widely deployed SCADA platforms in North American critical infrastructure — water treatment, manufacturing, food and beverage, oil and gas, pharmaceutical. During a network assessment, identifying an Ignition gateway and its version is often the first step toward understanding the attack surface. It’s also one of the easiest things to do, because Ignition has historically exposed version and configuration data without any authentication. ...