جزئیات آسیب‌پذیری
CVE-2020-36910
CAYIN Technology SMP-1000CAYIN Technology SMP-200CAYIN Technology SMPCAYIN Technology SMP-2100CAYIN Technology SMP-2200CAYIN Technology SMP-2210
Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter
CVSS 4.0
8.7بالا
شرح رسمی (انگلیسی)
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.7بالا | 4.0 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 8.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| CAYIN Technology | SMP-1000 | 1.0 Build 14099 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-200 | 1.0 Build 12331 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-200 | 1.0 Build 13080 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2000 | 1.0 Build 14087 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2000 | 1.0 Build 14167 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2100 | 10.0 Build 16228 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2100 | 3.0 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2200 | 3.0 Build 19025 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2200 | 3.0 Build 19029 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2210 | 3.0 Build 19025 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2300 | 3.0 Build 19316 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-2310 | 3.0 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-300 | 1.0 Build 14177 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-4000 | 1.0 Build 14087 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-4000 | 1.0 Build 14092 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-4000 | 1.0 Build 14098 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-6000 | 1.0 Build 14062 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-6000 | 1.0 Build 14069 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-6000 | 1.0 Build 14090 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-6000 | 1.0 Build 14097 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-6000 | 1.0 Build 14167 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-6000 | 1.0 Build 14199 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-6000 | 1.0 Build 14246 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-6000 | 3.0 Build 19025 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-8000 | 3.0 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-8000QD | 3.0 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-NEO | 1.0 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-NEO2 | 1.0 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-PRO4 | 1.0 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-PROPLUS | 1.5 Build 10081 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-WEB4 | 1.0 Build 10301 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-WEB4 | 1.5 Build 11126 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-WEB4 | 1.5 Build 11476 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-WEB4 | 2.0 Build 11175 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-WEB4 | 2.0 Build 13073 | CVEProject cvelistV5 (CNA) |
| CAYIN Technology | SMP-WEBPLUS | 6.5 Build 11126 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۷- https://www.exploit-db.com/exploits/48557 exploit
- https://www.cayintech.com product
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5569.php third-party-advisory
- https://packetstorm.news/files/id/157942 exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/182924 vdb-entry
- https://cxsecurity.com/issue/WLB-2020060049 exploit
- https://www.vulncheck.com/advisories/cayin-signage-media-player-authenticated-remote-command-injection-via-ntp-parameter third-party-advisory
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۰/۱۶
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- VulnCheck
پیش‌بینی بهره‌برداری (EPSS)
۱٫۴۳٪
احتمال بهره‌برداری در ۳۰ روز
۷۳٫۲٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- اثبات مفهوم
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')