CVE-2020-7357
Cayin CMS Command Injection
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 Metasploit module
Summary
Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cgi page. This issue affects several branches and versions of the CMS application, including CME-SE, CMS-60, CMS-40, CMS-20, and CMS version 8.2, 8.0, and 7.5.
Timeline
- CVE published
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- Cayin Technology Cayin CMS-SE
From 11.0 Build 19179 · through 11.0 Build 19179
- Cayin Technology Cayin CMS-60
From 11.0 Build 19025 · through 11.0 Build 19025
- Cayin Technology Cayin CMS-40
From 9.0 Build 14917 · through 9.0 Build 14917
- Cayin Technology Cayin CMS-20
From 9.0 Build 14917 · through 9.0 Build 14917
- Cayin Technology Cayin CMS
8.2 Build 12199, 8.0 Build 11175, 7.5 Build 11175