pentester.land· Feb 8, 2023· by Piotr Bazydło (@chudyPB)

Pwn2Owning Two Hosts At The Same Time: Abusing Inductive Automation Ignition’s Custom Deserialization

Open Original Article ↗
Target Program: Inductive Automation Ignition
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#Insecure deserialization#RCE#Security code review