Description
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CAYIN Technology SMP-8000QD
3.0affected
CAYIN Technology SMP-8000
3.0affected
CAYIN Technology SMP-6000
3.0 Build 19025affected1.0 Build 14246affected1.0 Build 14199affected1.0 Build 14167affected1.0 Build 14097affected1.0 Build 14090affected1.0 Build 14069affected1.0 Build 14062affected
CAYIN Technology SMP-4000
1.0 Build 14098affected1.0 Build 14092affected1.0 Build 14087affected
CAYIN Technology SMP-2310
3.0affected
CAYIN Technology SMP-2300
3.0 Build 19316affected
CAYIN Technology SMP-2210
3.0 Build 19025affected
CAYIN Technology SMP-2200
3.0 Build 19029affected3.0 Build 19025affected
CAYIN Technology SMP-2100
10.0 Build 16228affected3.0affected
CAYIN Technology SMP-2000
1.0 Build 14167affected1.0 Build 14087affected
CAYIN Technology SMP-1000
1.0 Build 14099affected
CAYIN Technology SMP-PROPLUS
1.5 Build 10081affected
CAYIN Technology SMP-WEBPLUS
6.5 Build 11126affected
CAYIN Technology SMP-WEB4
2.0 Build 13073affected2.0 Build 11175affected1.5 Build 11476affected1.5 Build 11126affected1.0 Build 10301affected
CAYIN Technology SMP-300
1.0 Build 14177affected
CAYIN Technology SMP-200
1.0 Build 13080affected1.0 Build 12331affected
CAYIN Technology SMP-PRO4
1.0affected
CAYIN Technology SMP-NEO2
1.0affected
CAYIN Technology SMP-NEO
1.0affected
References
- https://www.exploit-db.com/exploits/48557 ↗
- https://www.cayintech.com ↗
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5569.php ↗
- https://packetstorm.news/files/id/157942 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/182924 ↗
- https://cxsecurity.com/issue/WLB-2020060049 ↗
- https://www.vulncheck.com/advisories/cayin-signage-media-player-authenticated-remote-command-injection-via-ntp-parameter ↗