PT-2026-3134 · Unknown · Changjetong T+

Published 2026-01-15 · Updated 2026-01-15 · CVE-2023-7334

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Changjetong T+ versions up to and including 16.x

Description Changjetong T+ versions up to and including 16.x contain a .NET deserialization issue in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to the /tplus/ajaxpro/Ufida.T.CodeBehind. PriorityLevel,App Code.ashx?method=GetStoreWarehouseByStore API endpoint with a malicious JSON body. This leverages deserialization of attacker-controlled .NET types to invoke arbitrary methods, such as System.Diagnostics.Process.Start, potentially resulting in the execution of arbitrary commands in the context of the T+ application service account. The Shadowserver Foundation observed exploitation evidence on 2023-08-19 (UTC).

Recommendations Versions up to and including 16.x should be updated to a newer, secure version. As a temporary workaround, consider restricting access to the /tplus/ajaxpro/Ufida.T.CodeBehind. PriorityLevel,App Code.ashx?method=GetStoreWarehouseByStore API endpoint.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2023-7334

Affected Products

Changjetong T+

References · 10

• 🔥 https://github.com/MD-SEC/MDPOCS/blob/main/ChangJieTongTPlus_GetStoreWarehouseByStore_Rce_Poc.py · Exploit
• 🔥 https://blog.csdn.net/qq_53003652/article/details/134031230 · Exploit
• 🔥 https://freebuf.com/articles/web/381731.html · Exploit
• 🔥 https://blog.csdn.net/u010025272/article/details/131553591 · Exploit
• https://chanjetvip.com/product/goods/detail?id=6077e91b70fa071069139f62 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-7334 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7334 · Vendor Advisory
• https://twitter.com/CVEnew/status/2011926030974665005 · Twitter Post
• https://vulncheck.com/advisories/changjetong-tplus-getstorewarehousebystore-deserialization-rce · Note
• https://twitter.com/0dayPublishing/status/2011920348661350616 · Twitter Post