Skip to content
OpenAdvisories
High · 7.5 CVE-2024-7729 EUVD-2024-48606GHSA-q9cr-5729-r8j2

CAYIN Technology CMS - Sensitive File Download

Published Aug 14, 2024 · Updated Aug 16, 2024 · Assigned by twcert

Vendor: CAYIN Technology Product: CMS-20 Product: CMS-60 Product: CMS-SE Product: CMS-SE(18.04) Product: CMS-SE(22.04) Product: SMP-2100 Product: SMP-2200 Product: SMP-2210 Product: SMP-2300 Product: SMP-2310 Product: SMP-2400 Product: SMP-6000 Product: SMP-8000 Product: SMP-8000QD Product: SMP-8100

Description

The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.

Affected products

VendorProductAffectedFixed
CAYIN Technology SMP-2100 3.0 —
CAYIN Technology SMP-2200 3.0 – ≤ 4.0 —
CAYIN Technology SMP-2210 3.0 – ≤ 4.0 —
CAYIN Technology SMP-2300 3.0 – ≤ 4.0 —
CAYIN Technology SMP-2310 3.0 – ≤ 4.0 —
CAYIN Technology SMP-6000 3.0 —
CAYIN Technology SMP-8000 3.0 —
CAYIN Technology SMP-8000QD 3.0 —
CAYIN Technology CMS-20 11.0 —
CAYIN Technology CMS-60 11.0 —
CAYIN Technology CMS-SE 11.0 —
CAYIN Technology CMS-SE(18.04) 11.0 —
CAYIN Technology CMS-SE(22.04) 11.0 —
CAYIN Technology SMP-8100 4.0 —
CAYIN Technology SMP-2400 4.0 —

References