CVE-2023-37569

EIP tracks 1 public exploit for CVE-2023-37569. PoCs published by thewhiteh4t.

AI-analyzed exploit summary This exploit targets a command injection vulnerability in Emagic Data Center Management Suite v6.0. It sends a crafted POST request with a payload that executes a reverse shell to the attacker's specified host and port.

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on targeted system.