Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

vul_app:sharepoint_dataset/datatable_deserialization_vul（Rule ID：1070210130）

Release Date：2025/9/15

Rule Name：CVE-2020-1147: SharePoint DataSet/DataTable Deserialization Vulnerability

Severity：high

CVE ID：CVE-2020-1147

Descripiton：

Microsoft SharePoint, etc. are all products of Microsoft Corporation. A remote code execution vulnerability exists in Microsoft .NET Framework, SharePoint Server, and Visual Studio. The vulnerability stems from the program's inability to check the source tags of the XML file input. Attackers can use specially crafted documents to exploit this vulnerability to run arbitrary code in the context of the process responsible for deserializing XML content. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

Solution：

Update vendor patches.