CVE-2023-37286

Summary

CVE-2023-37286 is a newly identified vulnerability affecting SmartSoft's SmartBPM.NET application. The issue stems from the use of a hard-coded machine key, which can be exploited by unauthenticated remote attackers. By sending a serialized payload to the server, assailants can execute arbitrary code and disrupt the service. This vulnerability poses a significant risk, as it enables attackers to gain unauthorized access and manipulate the system without proper authentication. Organizations using the affected software are advised to apply the necessary patches or updates as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.