SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.Referenceshttps://www.twcert.org.tw/tw/cp-132-7221-438c6-1.html