CVE-2015-0994

Name of the Vulnerable Software and Affected Versions Inductive Automation Ignition version 7.7.2

Description The issue allows remote authenticated users to bypass a brute-force protection mechanism. This is achieved by using different session ID values in a series of HTTP requests.

Recommendations For Inductive Automation Ignition version 7.7.2, consider implementing additional security measures to prevent brute-force attacks, such as limiting the number of login attempts from a single IP address within a certain time frame, until a patch is available.