Remote Code Execution Vulnerability in Inductive Automation Ignition ModuleInvoke

CVE-2023-50218

What is CVE-2023-50218?

This vulnerability in the Inductive Automation Ignition software arises from a flaw in the ModuleInvoke class, leading to potential remote code execution via unvalidated user data. An attacker with authentication can exploit this issue to execute arbitrary code with SYSTEM privileges, posing a significant risk to the integrity of affected installations. It highlights the importance of strict validation methods to prevent the deserialization of untrusted data, ensuring robust security measures are in place. For more details, refer to ZDI-23-1813 and Inductive Automation's security resources.

References