Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-7729

CAYIN Technology CMS - Sensitive File Download

Description

The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CAYIN Technology SMP-2100

Default version status: unaffected

  • 3.0affected

CAYIN Technology SMP-2200

Default version status: unaffected

  • 3.0 to ≤ 4.0affected

CAYIN Technology SMP-2210

Default version status: unaffected

  • 3.0 to ≤ 4.0affected

CAYIN Technology SMP-2300

Default version status: unaffected

  • 3.0 to ≤ 4.0affected

CAYIN Technology SMP-2310

Default version status: unaffected

  • 3.0 to ≤ 4.0affected

CAYIN Technology SMP-6000

Default version status: unaffected

  • 3.0affected

CAYIN Technology SMP-8000

Default version status: unaffected

  • 3.0affected

CAYIN Technology SMP-8000QD

Default version status: unaffected

  • 3.0affected

CAYIN Technology CMS-20

Default version status: unaffected

  • 11.0affected

CAYIN Technology CMS-60

Default version status: unaffected

  • 11.0affected

CAYIN Technology CMS-SE

Default version status: unaffected

  • 11.0affected

CAYIN Technology CMS-SE(18.04)

Default version status: unaffected

  • 11.0affected

CAYIN Technology CMS-SE(22.04)

Default version status: unaffected

  • 11.0affected

CAYIN Technology SMP-8100

Default version status: unaffected

  • 4.0affected

CAYIN Technology SMP-2400

Default version status: unaffected

  • 4.0affected

References