ZDI-23-1014: (Pwn2Own) Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

attackers authentication authentication bypass automation bypass bypass vulnerability client critical exploit file function ignition inductive automation malicious missing opc opc ua page pwn2own target vulnerability zdi