CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2023-37286
Severity
CRITICAL
CVSS
9.8
EPSS
1.01%
Original NVD Description
SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)