{"id":"CVE-2024-7729","state":"PUBLISHED","title":"CAYIN Technology CMS - Sensitive File Download","description":"The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.","publishedAt":"2024-08-14T03:52:43.673Z","updatedAt":"2024-08-16T15:46:19.420Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"twcert"},"assigner":"twcert","products":["CAYIN Technology SMP-2100","CAYIN Technology SMP-2200","CAYIN Technology SMP-2210","CAYIN Technology SMP-2300","CAYIN Technology SMP-2310","CAYIN Technology SMP-6000","CAYIN Technology SMP-8000","CAYIN Technology SMP-8000QD","CAYIN Technology CMS-20","CAYIN Technology CMS-60","CAYIN Technology CMS-SE","CAYIN Technology CMS-SE(18.04)","CAYIN Technology CMS-SE(22.04)","CAYIN Technology SMP-8100","CAYIN Technology SMP-2400"],"affected":[{"vendor":"CAYIN Technology","product":"SMP-2100","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-2200","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}]},{"vendor":"CAYIN Technology","product":"SMP-2210","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}]},{"vendor":"CAYIN Technology","product":"SMP-2300","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}]},{"vendor":"CAYIN Technology","product":"SMP-2310","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}]},{"vendor":"CAYIN Technology","product":"SMP-6000","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-8000","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-8000QD","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-20","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-60","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-SE","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-SE(18.04)","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-SE(22.04)","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-8100","defaultStatus":"unaffected","versions":[{"version":"4.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-2400","defaultStatus":"unaffected","versions":[{"version":"4.0","status":"affected"}]}],"references":["https://www.twcert.org.tw/tw/cp-132-8003-5543e-1.html","https://www.twcert.org.tw/en/cp-139-8004-ed9aa-2.html","https://resource1.cayintech.com/patch/"],"weaknesses":["CWE-552"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/7xxx/CVE-2024-7729.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-7729","state":"PUBLISHED","datePublished":"2024-08-14T03:52:43.673Z","dateUpdated":"2024-08-16T15:46:19.420Z","assignerShortName":"twcert","assignerOrgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateReserved":"2024-08-13T06:08:30.865Z"},"containers":{"cna":{"title":"CAYIN Technology CMS - Sensitive File Download","descriptions":[{"lang":"en","value":"The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files."}],"affected":[{"vendor":"CAYIN Technology","product":"SMP-2100","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-2200","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}]},{"vendor":"CAYIN Technology","product":"SMP-2210","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}]},{"vendor":"CAYIN Technology","product":"SMP-2300","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}]},{"vendor":"CAYIN Technology","product":"SMP-2310","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}]},{"vendor":"CAYIN Technology","product":"SMP-6000","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-8000","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-8000QD","defaultStatus":"unaffected","versions":[{"version":"3.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-20","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-60","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-SE","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-SE(18.04)","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"CMS-SE(22.04)","defaultStatus":"unaffected","versions":[{"version":"11.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-8100","defaultStatus":"unaffected","versions":[{"version":"4.0","status":"affected"}]},{"vendor":"CAYIN Technology","product":"SMP-2400","defaultStatus":"unaffected","versions":[{"version":"4.0","status":"affected"}]}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-8003-5543e-1.html","tags":["third-party-advisory"]},{"url":"https://www.twcert.org.tw/en/cp-139-8004-ed9aa-2.html","tags":["third-party-advisory"]},{"url":"https://resource1.cayintech.com/patch/","tags":["patch"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-552","description":"CWE-552 Files or Directories Accessible to External Parties","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"twcert","orgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateUpdated":"2024-08-14T03:52:43.673Z"},"datePublic":"2024-08-14T03:29:00.000Z","impacts":[{"capecId":"CAPEC-497","descriptions":[{"lang":"en","value":"CAPEC-497 File Discovery"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">Install patch P24012 or later for following versions：</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2100 v3.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2200 v3.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2210 v3.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2300 v3.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2310 v3.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-6000 v3.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-8000 v3.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-8000QD v3.0</span><br><br><span style=\"background-color: rgb(255, 255, 255);\">Install patch P24006 or later for following versions：</span><br><span style=\"background-color: rgb(255, 255, 255);\">CMS-20 v11.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">CMS-60 v11.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">CMS-SE v11.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">CMS-SE(18.04) v11.0</span><br><br><span style=\"background-color: rgb(255, 255, 255);\">Install patch P24007 or later for following versions：</span><br><span style=\"background-color: rgb(255, 255, 255);\">CMS-SE(22.04) v11.0</span><br><br><span style=\"background-color: rgb(255, 255, 255);\">Install patch P24008 or later for following versions：</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2200 v4.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2210 v4.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2300 v4.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2310 v4.0</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-8100 v4.0</span><br><br><span style=\"background-color: rgb(255, 255, 255);\">Install patch P24009 or later for following versions：</span><br><span style=\"background-color: rgb(255, 255, 255);\">SMP-2400 v4.0</span>\n\n<br>"}],"value":"Install patch P24012 or later for following versions：\nSMP-2100 v3.0\nSMP-2200 v3.0\nSMP-2210 v3.0\nSMP-2300 v3.0\nSMP-2310 v3.0\nSMP-6000 v3.0\nSMP-8000 v3.0\nSMP-8000QD v3.0\n\nInstall patch P24006 or later for following versions：\nCMS-20 v11.0\nCMS-60 v11.0\nCMS-SE v11.0\nCMS-SE(18.04) v11.0\n\nInstall patch P24007 or later for following versions：\nCMS-SE(22.04) v11.0\n\nInstall patch P24008 or later for following versions：\nSMP-2200 v4.0\nSMP-2210 v4.0\nSMP-2300 v4.0\nSMP-2310 v4.0\nSMP-8100 v4.0\n\nInstall patch P24009 or later for following versions：\nSMP-2400 v4.0"}],"source":{"advisory":"TVN-202408004","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"cayintech","product":"smp-2100","defaultStatus":"unknown","versions":[{"version":"3.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:smp-2100:3.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-2200","defaultStatus":"unknown","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}],"cpes":["cpe:2.3:h:cayintech:smp-2200:*:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-2210","defaultStatus":"unknown","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}],"cpes":["cpe:2.3:h:cayintech:smp-2210:*:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-2300","defaultStatus":"unknown","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}],"cpes":["cpe:2.3:h:cayintech:smp-2300:*:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-2310","defaultStatus":"unknown","versions":[{"version":"3.0","status":"affected","lessThanOrEqual":"4.0","versionType":"custom"}],"cpes":["cpe:2.3:h:cayintech:smp-2310:*:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-6000","defaultStatus":"unknown","versions":[{"version":"3.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:smp-6000:3.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-8000","defaultStatus":"unknown","versions":[{"version":"3.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:smp-8000:3.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-8000qd","defaultStatus":"unknown","versions":[{"version":"3.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:smp-8000qd:3.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"cms-20","defaultStatus":"unknown","versions":[{"version":"11.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:cms-20:11.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"cms-60","defaultStatus":"unknown","versions":[{"version":"11.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:cms-60:11.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"cms-se","defaultStatus":"unknown","versions":[{"version":"11.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:cms-se:11.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"cms-se\\(18.04\\)","defaultStatus":"unknown","versions":[{"version":"11.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:cms-se\\(18.04\\):11.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"cms-se\\(22.04\\)","defaultStatus":"unknown","versions":[{"version":"11.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:cms-se\\(22.04\\):11.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-8100","defaultStatus":"unknown","versions":[{"version":"4.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:smp-8100:4.0:*:*:*:*:*:*:*"]},{"vendor":"cayintech","product":"smp-2400","defaultStatus":"unknown","versions":[{"version":"4.0","status":"affected"}],"cpes":["cpe:2.3:h:cayintech:smp-2400:4.0:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-16T15:25:14.308294Z","id":"CVE-2024-7729","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-16T15:46:19.420Z"}}]}}}