Using Grey Noise EAP Sensors For Novel Exploitation Discovery For CVE-2023-47246 | Grey Noise Blog
Summary: GreyNoise Labs researcher Jacob Fisher used the company's Early Access Program dynamic sensors to capture a new proof of concept for CVE-2023-47246, a path traversal vulnerability leading to remote code execution in SysAid On-Premise software. The work produced a new GreyNoise tag for the exploit and covered his methodology for obtaining packet captures of real-world service exploitation.
Bottom line: A path traversal flaw that ends in remote code execution on on-premise software is exactly the kind of vulnerability that gets picked up and weaponized quickly, and this PoC was caught by reactive sensors rather than a vendor advisory.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-47246
- Related
- CVE-2023-47246: Sys Aid Server Path Traversal Vulnerability Known Exploited Vulnerabilities · Nov 13, 2023Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026