Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-0526. PoCs published by Alejandro Alvarez Bravo.
AI-analyzed exploit summary This exploit leverages unsanitized input in the ping.php script of IBM 1754 GCM KVM switches to inject arbitrary commands via the $count and $size parameters, leading to remote command execution as root. The PoC demonstrates adding a backdoor user and enabling telnet access.
Description
ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) count or (2) size parameter.
Exploits (1)
This exploit leverages unsanitized input in the ping.php script of IBM 1754 GCM KVM switches to inject arbitrary commands via the $count and $size parameters, leading to remote command execution as root. The PoC demonstrates adding a backdoor user and enabling telnet access.