| |
Vulnerability CVE-2023-37286
Published: 2023-07-10
| Description: |
SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service. |
Type:
CWE-798
References: |
https://www.twcert.org.tw/tw/cp-132-7221-438c6-1.html
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
