Remote Code Execution Vulnerability in Inductive Automation Ignition

CVE-2023-50222

What is CVE-2023-50222?

This vulnerability within the Inductive Automation Ignition platform occurs in the ResponseParser method, where insufficient validation of user-supplied data can lead to deserialization of untrusted input. As a result, remote attackers may exploit this flaw to execute arbitrary code in the context of the affected user. To exploit this vulnerability, user interaction is required; specifically, the user must connect to a malicious server. It is essential for users of the affected product to remain vigilant and implement recommended security practices.

References