From Zero to Hero Part 2: Intel DCM From SQL Injection to RCE (CVE-2022-21225)

Introduction You’ve probably enjoyed my previous post about bypassing Intel DCM’s authentication mechanism to gain unauthorized access. This gave us the lowest possible “Guest” privileges in the DCM console. The second part will now show you a possible way to get Remote Code Execution on the underlying host by exploiting an authenticated SQL Injection vulnerability, […]

advisory bug bounty cve hero injection intel rce sql sql injection