CVE-2024-48839

This exploit demonstrates an authenticated OS command injection vulnerability in ABB Cylon Aspect BMS/BAS controller. The vulnerability allows arbitrary shell commands to be executed through the contents of an uploaded .db file, which is passed to the copyFile.sh script.

The exploit demonstrates an authenticated blind command injection vulnerability in ABB Cylon Aspect's bbmdUpdate.php. It injects a sleep command via the hexMask2 and NAThexMask2 POST parameters to prove arbitrary command execution.