Skip to content
OpenAdvisories

Product · CAYIN Technology

SMP-6000

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2020-36910

    Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter

    Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.

    CAYIN Technology SMP-8000 SMP-2200 SMP-2300
  • High 7.5
    CVE-2024-7729

    CAYIN Technology CMS - Sensitive File Download

    The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.

    CAYIN Technology SMP-2300 SMP-6000 CMS-SE(18.04)