Description
深信服终端检测响应平台（EDR）是一套由深信服公司提供的终端安全解决方案，包含轻量级的端点安全软件（Agent）和管理平台（MGR）。该平台存在远程命令执行漏洞，攻击者可通过构造特定的HTTP请求利用此漏洞，在目标主机上执行任意命令，可能导致系统被完全控制。
深信服-EDR /api/edr/sanforinter/v2/cssp/slog_client 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E6%B7%B1%E4%BF%A1%E6%9C%8D/%E6%B7%B1%E4%BF%A1%E6%9C%8D%20%E7%BB%88%E7%AB%AF%E6%A3%80%E6%B5%8B%E7%9B%B8%E5%BA%94%E5%B9%B3%E5%8F%B0%EF%BC%88EDR%EF%BC%89%20%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%EF%BC%88%E4%BA%8C%EF%BC%89/
http://www.xcxan.cn/archives/241
https://disk.scan.cm/All_wiki/Qingy%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E%E5%BA%9320210715/Web%E5%AE%89%E5%85%A8/%E6%B7%B1%E4%BF%A1%E6%9C%8D/%E6%B7%B1%E4%BF%A1%E6%9C%8D%20%E7%BB%88%E7%AB%AF%E6%A3%80%E6%B5%8B%E7%9B%B8%E5%BA%94%E5%B9%B3%E5%8F%B0%EF%BC%88EDR%EF%BC%89%20%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%EF%BC%88%E4%BA%8C%EF%BC%89/%E6%B7%B1%E4%BF%A1%E6%9C%8D%20%E7%BB%88%E7%AB%AF%E6%A3%80%E6%B5%8B%E7%9B%B8%E5%BA%94%E5%B9%B3%E5%8F%B0%EF%BC%88EDR%EF%BC%89%20%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%EF%BC%88%E4%BA%8C%EF%BC%89.md?hash=zE0KEPGJ
https://zhuanlan.zhihu.com/p/620418212
https://www.hackjie.com/docs/3217.html
https://bbs.sangfor.com.cn/forum.php?mod=viewthread&tid=119831
https://www.cnblogs.com/backlion/p/13854564.html
https://github.com/jas502n/sangfor/blob/master/1earn/Security/RedTeam/%E5%AE%89%E9%98%B2%E8%AE%BE%E5%A4%87/SecDevice-Exploits.md
https://www.sentinelone.com/vulnerability-database/cve-2025-34041/
https://www.sangfor.com/blog/cybersecurity/sangfor-endpoint-secure-remote-command-execution-vulnerability
https://vulncheck.com/advisories/sangfor-edr-command-injection
https://s4e.io/tools/sangfor-edr-remote-code-execution
https://beaglesecurity.com/blog/vulnerability/sangfor-edr-3-2-17R1-3-2-21-rce.html