Eclipse Equinox OSGi 3.7.2 Remote Code Execution via Console
Vulnerability Description
Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the console interface. Attackers can connect to the OSGi console port and send base64-encoded bash commands wrapped in fork directives to achieve code execution and establish reverse shell connections.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-54344
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- [Andrzej Olchawa, Milenko Starcik
References
Affected Vendor
equinox
View all reports →