Lucene search
+L

7 matches found

NVD
NVD
•added 2024/05/03 3:15 a.m.•41 views

CVE-2023-39475

Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not requir...

9.8CVSS9.9AI score0.64076EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/03 2:10 a.m.•78 views

CVE-2023-39475

CVE-2023-39475 affects Inductive Automation Ignition through the ParameterVersionJavaSerializationCodec deserialization of untrusted data. The root cause is lack of validation of user-supplied data in this class, allowing a remote attacker to execute arbitrary code in the context of SYSTEM withou...

9.8CVSS9.8AI score0.64076EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/03 2:10 a.m.•21 views

CVE-2023-39475 Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not requir...

9.8CVSS8.2AI score0.64076EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/03 2:10 a.m.•44 views

CVE-2023-39475 Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not requir...

9.8CVSS10AI score0.64076EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•2 views

CVE-2023-39475: Deserialization of Untrusted Data

Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not requir...

9.8CVSS6.7AI score0.64076EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/08/16 12:00 a.m.•18 views

The vulnerability of the ParameterVersionJavaSerializationCodec class in Industrial Automation Ignition software allows a perpetrator to execute arbitrary code.

The vulnerability of the ParameterVersionJavaSerializationCodec class in Inductive Automation Ignition software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code within the SYSTEM context...

10CVSS8.2AI score0.64076EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2023/08/08 12:00 a.m.•39 views

(0Day) Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ParameterVersionJavaSerializationCodec class. The issue results from t...

9.8CVSS7.4AI score0.64076EPSS
SaveExploits0
Rows per page
Query Builder