The vulnerability of the getInformation method in the FortEquipmentNodeController class of the IT-infrastructure and cybersecurity management system Sangfor Operation and Maintenance Security Management System (OSM) allows a attacker to execute arbitrary commands.

The vulnerability of the getInformation method in the FortEquipmentNodeController class of the IT-infrastructure and cybersecurity management system Sangfor Operation and Maintenance Security Management System OSM is related to the lack of measures taken to neutralize special elements during the...