# Multiple vulnerabilities in Inductive Automation Ignition

**URL:** <https://forum.inductiveautomation.com/t/multiple-vulnerabilities-in-inductive-automation-ignition/77293>\
**Category:** Ignition\
**Tags:** ignition78, ignition79, ignition80, ignition81\
**Created:** [August 2, 2023, 3:11pm UTC](https://forum.inductiveautomation.com/t/multiple-vulnerabilities-in-inductive-automation-ignition/77293 "2023-08-02T15:11:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![antonio.sanchez](https://avatars.discourse-cdn.com/v4/letter/a/a587f6/32.png) [@antonio.sanchez](https://forum.inductiveautomation.com/u/antonio.sanchez)\
**Post date:** [August 2, 2023, 3:11pm UTC](https://forum.inductiveautomation.com/t/multiple-vulnerabilities-in-inductive-automation-ignition/77293/1 "2023-08-02T15:11:47Z")

</div>

hello

today we recibet a Newsletter about vulnerabilities in Inductive Automation Ignition.

Description  
The researcher, 20urdjk , has reported 3 high severity vulnerabilities in the Ignition product, from the manufacturer Inductive Automation, whose exploitation could allow remote code execution or authentication bypass.

CVE-2023-38121  
CVE-2023-38122  
CVE-2023-38123

Do you know anything about it?

They say that you should update to the latest version, do you know if there is any other solution and not update?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [August 2, 2023, 3:17pm UTC](https://forum.inductiveautomation.com/t/multiple-vulnerabilities-in-inductive-automation-ignition/77293/2 "2023-08-02T15:17:10Z")

</div>

Today is the coordinated disclosure date for these issues discovered at ZDI earlier this year.

Upgrading to 8.1.26 or later is the only recommended course of action.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 2, 2023, 3:23pm UTC](https://forum.inductiveautomation.com/t/multiple-vulnerabilities-in-inductive-automation-ignition/77293/3 "2023-08-02T15:23:56Z")

</div>

Note that v7.8 and v8.0 are completely end-of-life. v7.9 is in the "limited support" phase until next June. Only v8.1.x is in Active Support, and receives bug fixes. While an exception could be made for a v7.9 security fix, don't hold your breath.

Upgrade to v8.1.x.

Dates from this IA blog post:

> **[The Future of Ignition 7.9 LTS and EOL Plans](https://inductiveautomation.com/blog/the-future-of-ignition-79-lts-and-eol-plans)**
>
> Ignition 7.9 is the last Long-Term Support (LTS) release for the Ignition 7 branch. LTS versions of Ignition receive active support from our development and tech support teams, including improvements and fixes for a full five years after their...