Beveiligingsadvies

CVE-2023-37286

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-10 00:00:00

Laatst bijgewerkt 2024-11-12 19:28:26

Toegewezen door twcert

CVSS-score 9.8

Status PUBLISHED

Beschrijving

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.

← Alle CVE's bekijken Bekijk op cve.org ↗