PT-2026-1777 · Sangfor · Sangfor Operation/Maintenance Management System
Liyu Zhu
·
Published
2026-01-09
·
Updated
2026-01-10
·
CVE-2025-15500
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Sangfor Operation and Maintenance Management System versions up to 3.0.8
Description
A flaw exists in the HTTP POST Request Handler component of the software, specifically in the processing of the
/isomp-protocol/protocol/getHis file. Manipulation of the sessionPath argument can lead to operating system command injection. The attack can be initiated remotely. The exploit for this issue has been publicly released. The vendor was notified of this issue but did not provide a response.Recommendations
Versions up to 3.0.8 should be updated when a fix becomes available. As a temporary workaround, consider restricting access to the
/isomp-protocol/protocol/getHis endpoint. Avoid using the sessionPath parameter in the affected API endpoint until the issue is resolved.Exploit
Fix
OS Command Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sangfor Operation/Maintenance Management System