Skip to content
OpenAdvisories

Product · CAYIN Technology

SMP-WEBPLUS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2020-36910

    Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter

    Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.

    CAYIN Technology SMP-8000 SMP-2200 SMP-2300