CVE-2023-54342 - Vulnerability Analysis

Overview

Eclipse Equinox OSGi 3.8 through 3.18 contains a remote code execution caused by unauthenticated exploitation of the fork command in the console interface, letting attackers execute arbitrary code remotely, exploit requires unauthenticated telnet connection.

Severity & Score

Impact

Unauthenticated attackers can execute arbitrary code remotely, potentially leading to full system compromise.

Mitigation

Update to the latest version of Eclipse Equinox OSGi.

References

• https://www.exploit-db.com/exploits/51878
• https://www.vulncheck.com/advisories/eclipse-equinox-osgi-console-remote-code-execution

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner