References https://github.com/zan8in/afrog/issues/65 https://www.sangfor.com/blog/cybersecurity/clarification-injection-vulnerability-sangfor-ssl-vpn https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/ https://github.com/master-abc/cve/issues/14 https://www.sentinelone.com/vulnerability-database/cve-2023-30806/
Related Vulnerabilities深信服DC数据中心管理系统 /src/sangforindex XML 外部实体注入漏洞PoCCVE-2025-15503: Sangfor OSM - Arbitrary File Uploadsangfor-reporter-anyfileread: Sangfor reporter 任意文件读取PoCsangfor-dc-sangforindex-xxe: 深信服 DC数据中心管理系统 sangforindex XML实体注入PoCsangfor-edr-arbitrary-admin-login: sangfor-edr-arbitrary-admin-loginPoCsangfor-edr-cssp-rce: Sangfor EDR 3.2.17R1/3.2.21 - Remote Code ExecutionPoCsangfor-logcent-rce: 深信服行为感知系统/日志中心 c.php 远程命令执行PoCsangfor-login-rce: 深信服 应用交付管理系统 login 远程命令执行漏洞PoCsangfor-ngaf-fileread: 深信服 NGAF 任意文件读取漏洞PoCsangfor-ngaf-login-rce: 深信服下一代防火墙NGAF login远程命令执行漏洞PoCsangfor-sg-catjs-fileread: 深信服 SG上网优化管理系统 catjs.php 任意文件读取PoCsangfor-sslvpn-rce: Sangfor SSLVPN RCEPoCCNVD-2020-46552: Sangfor EDR - Remote Code Execution