CyberSecBulletin

SamrtSoft vulnerabilities

We track 2 vulnerabilities in SamrtSoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2023.

2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score

Latest SamrtSoft vulnerabilities

  • 9.1 Critical severity

    SmartBPM.NET: Use of Hard-coded Credentials

    CVE-2023-37287SamrtSoft

    SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes.

  • 9.8 Critical severity

    SmartBPM.NET: Use of Hard-coded Credentials

    CVE-2023-37286SamrtSoftEPSS 1.01%

    SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.