The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code.