Description (CNA)
Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cgi page. This issue affects several branches and versions of the CMS application, including CME-SE, CMS-60, CMS-40, CMS-20, and CMS version 8.2, 8.0, and 7.5.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cayin Technology / Cayin CMS-SE | affected 11.0 Build 19179 through 11.0 Build 19179 |
| Cayin Technology / Cayin CMS-60 | affected 11.0 Build 19025 through 11.0 Build 19025 |
| Cayin Technology / Cayin CMS-40 | affected 9.0 Build 14917 through 9.0 Build 14917 |
| Cayin Technology / Cayin CMS-20 | affected 9.0 Build 14917 through 9.0 Build 14917 |
| Cayin Technology / Cayin CMS | affected 8.2 Build 12199; affected 8.0 Build 11175; affected 7.5 Build 11175 |
CWE
CWE-78
References
- https://github.com/rapid7/metasploit-framework/pull/13607
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5570.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/182925
ADP enrichment
No English description supplied.