CyberRota Analysis
AI-GeneratedThe Sangfor Operation and Maintenance Security Management System versions up to 3.0.13 are vulnerable to a remote command injection due to flaws in the DpLoginController function. This vulnerability allows attackers to execute arbitrary operating system commands, potentially compromising the system's integrity and confidentiality. Organizations using this software should prioritize patching or mitigating this vulnerability to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal_login of the component Login Endpoint. This manipulation causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.