Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

vul_app:sharepoint_server-side_include_and_viewstate_rce_vul（Rule ID：1070210146）

Release Date：2025/9/15

Rule Name：CVE-2020-16952: SharePoint Server-Side Include and ViewState Remote Code Execution Vulnerability

Severity：high

CVE ID：CVE-2020-16952

Descripiton：

Microsoft SharePoint is a set of enterprise business collaboration platform of Microsoft Corporation. The platform is used to integrate business information, and can share work, work with others, organize projects and work groups, and search for people and information. Microsoft SharePoint has a security vulnerability that allows and attacker to run arbitrary code in the context of SharePoint application pool and SharePoint server farm accounts. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

Solution：

Update vendor patches.