Vulnerability · Published Jan 6, 2026 · Assigned by VulnCheck
CVE-2020-36910Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter
High 8.8
In plain English
A high-severity OS command injection in SMP-1000 from CAYIN Technology. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.4%top 26.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| CAYIN Technology | SMP-8000QD | 3.0 |
| CAYIN Technology | SMP-8000 | 3.0 |
| CAYIN Technology | SMP-6000 | 3.0 Build 190251.0 Build 142461.0 Build 141991.0 Build 141671.0 Build 140971.0 Build 140901.0 Build 140691.0 Build 14062 |
| CAYIN Technology | SMP-4000 | 1.0 Build 140981.0 Build 140921.0 Build 14087 |
| CAYIN Technology | SMP-2310 | 3.0 |
| CAYIN Technology | SMP-2300 | 3.0 Build 19316 |
| CAYIN Technology | SMP-2210 | 3.0 Build 19025 |
| CAYIN Technology | SMP-2200 | 3.0 Build 190293.0 Build 19025 |
| CAYIN Technology | SMP-2100 | 10.0 Build 162283.0 |
| CAYIN Technology | SMP-2000 | 1.0 Build 141671.0 Build 14087 |
| CAYIN Technology | SMP-1000 | 1.0 Build 14099 |
| CAYIN Technology | SMP-PROPLUS | 1.5 Build 10081 |
| CAYIN Technology | SMP-WEBPLUS | 6.5 Build 11126 |
| CAYIN Technology | SMP-WEB4 | 2.0 Build 130732.0 Build 111751.5 Build 114761.5 Build 111261.0 Build 10301 |
| CAYIN Technology | SMP-300 | 1.0 Build 14177 |
| CAYIN Technology | SMP-200 | 1.0 Build 130801.0 Build 12331 |
| CAYIN Technology | SMP-PRO4 | 1.0 |
| CAYIN Technology | SMP-NEO2 | 1.0 |
| CAYIN Technology | SMP-NEO | 1.0 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-48557 exploit
- Cayin Technology Official Website product
- Zero Science Lab Disclosure (ZSL-2020-5569) third-party-advisory
- Packet Storm Security Exploit Entry exploit
- IBM X-Force Vulnerability Exchange vdb-entry
- CXSecurity Vulnerability Listing exploit
- VulnCheck Advisory: Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter third-party-advisory