Remote Code Execution Vulnerability in Inductive Automation Ignition
CVE-2023-50222

8.8HIGH

Key Information:

Vendor

Inductive Automation

Status
Inductive Automation Ignition
Vendor
CVE Published:
3 May 2024

What is CVE-2023-50222?

This vulnerability within the Inductive Automation Ignition platform occurs in the ResponseParser method, where insufficient validation of user-supplied data can lead to deserialization of untrusted input. As a result, remote attackers may exploit this flaw to execute arbitrary code in the context of the affected user. To exploit this vulnerability, user interaction is required; specifically, the user must connect to a malicious server. It is essential for users of the affected product to remain vigilant and implement recommended security practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.zerodayinitiative.com/advisories/ZDI-24-017/
https://security.inductiveautomation.com/?tcuUid=fc4c4515...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.