Sangfor EDR 3.2.17R1/3.2.21 RCE

With Sangfor’s NGAF, IAM, and Cyber Command, Endpoint Secure is part of a fully integrated cooperative security solution that gives a detailed response to malware infections and APT breaches across the entire organization’s network, with ease of management, operation, and maintenance. Sangfor EDR 3.2.17R1/3.2.21 holds a vulnerability that allows remote code execution. The affected versions include v3.2.16,3.2.17 and 3.2.19.

Mitigation / Precaution

• In order to patch this vulnerability, please install the official patch that is made available for supported, vulnerable instances.

Written by

Sooraj V Nair

Cyber Security Engineer