Description
杭州新威数字信息 SMG网关管理软件的 changelogo.php 文件存在命令执行漏洞，攻击者可以通过上传特制文件名的方式执行任意系统命令，可能导致服务器被完全控制。
Synway SMG网关管理软件 /changelogo.php 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nosec.org/m/share/5889.html
https://mrxn.net/jswz/synway-9-12ping-rce.html
https://blog.csdn.net/m0_50125527/article/details/146986341
https://www.ddpoc.com/DVB-2025-8985.html
https://avd.aliyun.com/detail?id=AVD-2025-1448
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/synway/synwaysmg-radius-rce.yaml
https://www.vulncheck.com/advisories/synway-smg-gateway-management-software-os-command-injection-via-radius-address