CVE-2023-50233

published 2024-05-03

CVE-2023-50233: Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…

Priority P2 58 high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must connect to a malicious server.

The specific flaw exists within the getJavaExecutable method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22029.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
inductive_automation	ignition	—	—
inductiveautomation	ignition	>= 8.1.0 < 8.1.33	8.1.33
linux	linux_kernel	>= 0 < 3.13.0-204.255	3.13.0-204.255

Detection & IOCs extracted from sources · hover to see the quote

• → The vulnerability exists within the `getJavaExecutable` method of Inductive Automation Ignition. Monitor for directory traversal patterns in path arguments supplied to this method during client-server interactions. ↗
• → Exploitation requires the target user to connect to a malicious server. Monitor for Ignition clients connecting to unexpected or external Ignition gateway servers, which may indicate a malicious server luring victims. ↗
• → Successful exploitation results in arbitrary code execution in the context of the current user. Monitor for unexpected child processes spawned by the Ignition client process following a server connection event. ↗

• · Exploitation requires user interaction — the victim must actively connect to an attacker-controlled malicious Ignition server. This limits purely passive/remote exploitation scenarios. ↗

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvd v3.0 8.8 HIGH CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

osv 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22