ZDI-23-1047: (0Day) Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1047?
ZDI-23-1047 is classified as a critical vulnerability due to its ability to allow remote code execution without authentication.
How do I fix ZDI-23-1047?
To remediate ZDI-23-1047, update the Inductive Automation Ignition software to the latest patched version provided by the vendor.
Who is affected by ZDI-23-1047?
Any user or organization running a vulnerable version of Inductive Automation Ignition is at risk from ZDI-23-1047.
Can ZDI-23-1047 be exploited remotely?
Yes, ZDI-23-1047 can be exploited remotely by attackers without the need for authentication.
What type of vulnerability is ZDI-23-1047?
ZDI-23-1047 is a remote code execution vulnerability that can lead to serious security risks for affected installations.