CVE-2023-54344 - Vulnerability Analysis

Overview

Eclipse Equinox OSGi <= 3.7.2 contains a remote code execution caused by improper validation of commands sent to the console interface, letting unauthenticated attackers execute arbitrary commands remotely, exploit requires access to the OSGi console port.

Severity & Score

Impact

Unauthenticated attackers can execute arbitrary commands remotely, potentially leading to full system compromise.

Mitigation

Update to the latest version beyond 3.7.2.

References

• https://www.vulncheck.com/advisories/eclipse-equinox-osgi-remote-code-execution-via-console
• https://www.exploit-db.com/exploits/51879

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner