Remote Code Execution Vulnerability in Inductive Automation Ignition

CVE-2022-35873

What is CVE-2022-35873?

A vulnerability exists in Inductive Automation Ignition 8.1.15, allowing remote attackers to execute arbitrary code due to improper handling of ZIP files. Successful exploitation requires user interaction, such as visiting a malicious page or opening a crafted ZIP file. This flaw can lead to the execution of unintended Python scripts within the application, as the user interface does not adequately alert users about the associated risks. Attackers may exploit this weakness to execute code with SYSTEM privileges, posing a significant security threat. For further details, refer to the Zero Day Initiative advisory.

References