Vulnerability · Published Aug 6, 2020 · Assigned by rapid7
CVE-2020-7357Cayin CMS Command Injection
Critical 9.6
In plain English
A critical-severity OS command injection in Cayin CMS from Cayin Technology. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 32.1% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.
Official description
Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cgi page. This issue affects several branches and versions of the CMS application, including CME-SE, CMS-60, CMS-40, CMS-20, and CMS version 8.2, 8.0, and 7.5.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cayin Technology | Cayin CMS-SE | 11.0 Build 19179 – through 11.0 Build 19179 |
| Cayin Technology | Cayin CMS-60 | 11.0 Build 19025 – through 11.0 Build 19025 |
| Cayin Technology | Cayin CMS-40 | 9.0 Build 14917 – through 9.0 Build 14917 |
| Cayin Technology | Cayin CMS-20 | 9.0 Build 14917 – through 9.0 Build 14917 |
| Cayin Technology | Cayin CMS | 8.2 Build 121998.0 Build 111757.5 Build 11175 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
References
- https://github.com/rapid7/metasploit-framework/pull/13607 x_refsource_MISC
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5570.php x_refsource_MISC
- https://exchange.xforce.ibmcloud.com/vulnerabilities/182925 vendor-advisory, x_refsource_IBM