VYPR
← All advisories
Critical severity9.6NVD Advisory· Published Aug 6, 2020· Updated Jun 17, 2026

CVE-2020-7357

CVE-2020-7357

Description

Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cgi page. This issue affects several branches and versions of the CMS application, including CME-SE, CMS-60, CMS-40, CMS-20, and CMS version 8.2, 8.0, and 7.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Cayintech/CMS 20 Firmware2 versions
    cpe:2.3:o:cayintech:cms-20_firmware:9.0:14092:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:cayintech:cms-20_firmware:9.0:14092:*:*:*:*:*:*
    • cpe:2.3:o:cayintech:cms-20_firmware:9.0:14197:*:*:*:*:*:*
  • Cayintech/CMS 40 Firmware3 versions
    cpe:2.3:o:cayintech:cms-40_firmware:9.0:14093:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:cayintech:cms-40_firmware:9.0:14093:*:*:*:*:*:*
    • cpe:2.3:o:cayintech:cms-40_firmware:9.0:14197:*:*:*:*:*:*
    • cpe:2.3:o:cayintech:cms-40_firmware:9.0:14199:*:*:*:*:*:*
  • Cayintech/CMS 60 Firmware
    cpe:2.3:o:cayintech:cms-60_firmware:11.0:19025:*:*:*:*:*:*
  • Cayintech/CMS Se Lxc Firmware
    cpe:2.3:o:cayintech:cms-se-lxc_firmware:-:*:*:*:*:*:*:*
  • Cayintech/CMS Se Firmware3 versions
    cpe:2.3:o:cayintech:cms-se_firmware:11.0:18325:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:cayintech:cms-se_firmware:11.0:18325:*:*:*:*:*:*
    • cpe:2.3:o:cayintech:cms-se_firmware:11.0:19025:*:*:*:*:*:*
    • cpe:2.3:o:cayintech:cms-se_firmware:11.0:19179:*:*:*:*:*:*
  • Cayintech/CMS3 versions
    cpe:2.3:o:cayintech:cms:7.5:11175:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:cayintech:cms:7.5:11175:*:*:*:*:*:*
    • cpe:2.3:o:cayintech:cms:8.0:11175:*:*:*:*:*:*
    • cpe:2.3:o:cayintech:cms:8.2:12199:*:*:*:*:*:*
  • Cayin/CMSllm-create
    Range: 8.2, 8.0, 7.5, CME-SE, CMS-60, CMS-40, CMS-20
  • CAYIN Technology/Cayin CMSv53 versions
    9.0 Build 14917+ 2 more
    • (no CPE)range: 9.0 Build 14917
    • (no CPE)range: 11.0 Build 19179
    • (no CPE)range: 8.2 Build 12199

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.