Description
Inductive Automation Ignition是美国Inductive Automation公司的一套用于SCADA系统的集成软件平台。Inductive Automation Ignition中存在代码执行漏洞。此漏洞是由于Base64Element类对于用户上传的文件缺乏校验导致的。
Inductive Automation Ignition CVE-2023-50220 代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-50220
https://www.cve.org/CVERecord?id=CVE-2023-50220
https://www.zerodayinitiative.com/advisories/ZDI-24-015/
https://security.inductiveautomation.com/?tcuUid=fc4c4515-046d-4365-b688-693337449c5b
https://xz.aliyun.com/t/13603
https://avd.aquasec.com/nvd/2023/cve-2023-50220/
https://app.opencve.io/cve/CVE-2023-50220
https://cve.circl.lu/search?vendor=inductiveautomation&product=ignition
https://vulnerability.circl.lu/search?vendor=inductiveautomation&product=ignition
https://www.cvedetails.com/vulnerability-list/vendor_id-15335/product_id-31438/version_id-697313/Inductiveautomation-Ignition-8.1.15.html