ZDI-CAN-20290: ZDI-23-1047: (0Day) Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability
Published Aug 8, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
Inductive Automation Ignition
Event History
Aug 8, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Mar 28, 2025
Advisory Published
via ZDI·02:08 AM
Frequently Asked Questions
1
What is the severity of ZDI-CAN-20290?
ZDI-CAN-20290 is classified as a critical vulnerability due to its potential for remote code execution without authentication.
2
How do I fix ZDI-CAN-20290?
To fix ZDI-CAN-20290, apply the latest security patch provided by Inductive Automation for Ignition.
3
What systems are affected by ZDI-CAN-20290?
ZDI-CAN-20290 affects installations of Inductive Automation Ignition.
4
Can ZDI-CAN-20290 be exploited remotely?
Yes, ZDI-CAN-20290 can be exploited remotely, allowing attackers to execute arbitrary code.
5
Is authentication required to exploit ZDI-CAN-20290?
No, authentication is not required to exploit ZDI-CAN-20290.