What is the severity of CVE-2023-50223?

CVE-2023-50223 is considered a critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2023-50223?

To mitigate CVE-2023-50223, update Inductive Automation Ignition to the latest version that addresses this vulnerability.

What software is affected by CVE-2023-50223?

CVE-2023-50223 affects Inductive Automation Ignition software installations.

Can CVE-2023-50223 be exploited remotely?

Yes, CVE-2023-50223 can be exploited remotely by authenticated attackers.

What type of vulnerability is CVE-2023-50223?

CVE-2023-50223 is a deserialization of untrusted data vulnerability that allows remote code execution.

Vulnerability/
CVE-2023-50223

high

8.8

CWE

502

3/5/2024

2/8/2024

22/2/2025

CVE-2023-50223: Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

First published: Fri May 03 2024(Updated: )

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability. The specific flaw exists within the ExtendedDocumentCodec class. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22127.

Credit: zdi-disclosures@trendmicro.com

Affected Software	Affected Version	How to fix
Inductive Automation Ignition 8

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2023-50223?
CVE-2023-50223 is considered a critical severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2023-50223?
To mitigate CVE-2023-50223, update Inductive Automation Ignition to the latest version that addresses this vulnerability.
What software is affected by CVE-2023-50223?
CVE-2023-50223 affects Inductive Automation Ignition software installations.
Can CVE-2023-50223 be exploited remotely?
Yes, CVE-2023-50223 can be exploited remotely by authenticated attackers.
What type of vulnerability is CVE-2023-50223?
CVE-2023-50223 is a deserialization of untrusted data vulnerability that allows remote code execution.

agent/title
agent/references
agent/weakness
agent/type
agent/description
agent/first-publish-date
collector/zdi-advisory
source/ZDI
alias/ZDI-24-018
alias/ZDI-CAN-22127
alias/CVE-2023-50223
agent/software-canonical-lookup
agent/softwarecombine
agent/author
agent/severity
agent/event
collector/nvd-api
source/NVD
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/trending
agent/tags
agent/source
vendor/inductive automation
canonical/inductive automation ignition

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.