top of page
perceptive_background_267k.jpg

Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sen…

Published:

4 May 2026 at 22:00:00

Alert date:

5 May 2026 at 13:07:56

Source:

nvd.nist.gov

Click to open the original link from this advisory

Enterprise Applications

Eclipse Equinox OSGi version 3.7.2 and earlier contains a critical remote code execution vulnerability (CVE-2023-54344) that allows unauthenticated attackers to execute arbitrary commands through the console interface. Attackers can connect to the OSGi console port and send base64-encoded bash commands wrapped in fork directives to achieve code execution. The vulnerability enables attackers to establish reverse shell connections and gain unauthorized access to affected systems. This represents a significant security risk for applications using vulnerable versions of Eclipse Equinox OSGi framework.

Technical details

Mitigation steps:

Affected products:

Eclipse Equinox OSGi

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page