CVE-2023-37286 (published 2023-07-10T00:00:00)
SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.
Affected products: Vendor: SamrtSoft
Product: SmartBPM.NET 
Versions: 6.70