vendor:
Equinox
by:
Andrzej Olchawa, Milenko Starcik, VisionSpace Technologies GmbH
6.1
CVSS
HIGH
Remote Code Execution
78
CWE
Product Name: Equinox
Affected Version From: 3.7.2002
Affected Version To: 3.7.2 and earlier
Patch Exists: NO
Related CWE:
CPE: a:eclipse:equinox
Platforms Tested: Linux
2023
OSGi v3.7.2 Console Remote Code Execution
The exploit allows for the execution of arbitrary commands, enabling the opening of a reverse shell connection on systems using OSGi v3.7.2 and earlier.
Mitigation:
Update to a version later than 3.7.2 to prevent exploitation of this vulnerability.
