Read the docs
TI-2020-05950 Aliases CVE-2020-7357GHSA-7qhp-fg3p-fvch

Cayin CMS Command Injection

Priority HIGH 67CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.

Summary

Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cgi page. This issue affects several branches and versions of the CMS application, including CME-SE, CMS-60, CMS-40, CMS-20, and CMS version 8.2, 8.0, and 7.5.

Why it matters now

EPSS 0.32094 98th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CAYIN TechnologyCayin CMS-SE11.0 Build 19179 – 11.0 Build 19179—No fix listedCNA
CAYIN TechnologyCayin CMS-6011.0 Build 19025 – 11.0 Build 19025—No fix listedCNA
CAYIN TechnologyCayin CMS-409.0 Build 14917 – 9.0 Build 14917—No fix listedCNA
CAYIN TechnologyCayin CMS-209.0 Build 14917 – 9.0 Build 14917—No fix listedCNA
CAYIN TechnologyCayin CMS8.2 Build 12199; 8.0 Build 11175; 7.5 Build 11175—No fix listedCNA
  • Cayin CMS-SE VendorCAYIN Technology Affected 11.0 Build 19179 – 11.0 Build 19179 Fixed in — No fix listed CNA
  • Cayin CMS-60 VendorCAYIN Technology Affected 11.0 Build 19025 – 11.0 Build 19025 Fixed in — No fix listed CNA
  • Cayin CMS-40 VendorCAYIN Technology Affected 9.0 Build 14917 – 9.0 Build 14917 Fixed in — No fix listed CNA
  • Cayin CMS-20 VendorCAYIN Technology Affected 9.0 Build 14917 – 9.0 Build 14917 Fixed in — No fix listed CNA
  • Cayin CMS VendorCAYIN Technology Affected 8.2 Build 12199; 8.0 Build 11175; 7.5 Build 11175 Fixed in — No fix listed CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:o:cayintech:cms-se_firmware:11.0:19179:*:*:*:*:*:*11.0 19179VulnerableCayintech
cpe:2.3:a:cayintech:cms-se:-:*:*:*:*:*:*:*not specified by NVDRunning onCayintech
cpe:2.3:o:cayintech:cms-se_firmware:11.0:19025:*:*:*:*:*:*11.0 19025VulnerableCayintech
cpe:2.3:o:cayintech:cms-se_firmware:11.0:18325:*:*:*:*:*:*11.0 18325VulnerableCayintech
cpe:2.3:o:cayintech:cms-se-lxc_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableCayintech
cpe:2.3:h:cayintech:cms-se-lxc:-:*:*:*:*:*:*:*not specified by NVDRunning onCayintech
cpe:2.3:o:cayintech:cms-60_firmware:11.0:19025:*:*:*:*:*:*11.0 19025VulnerableCayintech
cpe:2.3:h:cayintech:cms-60:-:*:*:*:*:*:*:*not specified by NVDRunning onCayintech
cpe:2.3:o:cayintech:cms-40_firmware:9.0:14197:*:*:*:*:*:*9.0 14197VulnerableCayintech
cpe:2.3:h:cayintech:cms-40:-:*:*:*:*:*:*:*not specified by NVDRunning onCayintech
  • cpe:2.3:o:cayintech:cms-se_firmware:11.0:19179:*:*:*:*:*:* Versions 11.0 19179 Vulnerable ·Cayintech
  • cpe:2.3:a:cayintech:cms-se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cayintech
  • cpe:2.3:o:cayintech:cms-se_firmware:11.0:19025:*:*:*:*:*:* Versions 11.0 19025 Vulnerable ·Cayintech
  • cpe:2.3:o:cayintech:cms-se_firmware:11.0:18325:*:*:*:*:*:* Versions 11.0 18325 Vulnerable ·Cayintech
  • cpe:2.3:o:cayintech:cms-se-lxc_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cayintech
  • cpe:2.3:h:cayintech:cms-se-lxc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cayintech
  • cpe:2.3:o:cayintech:cms-60_firmware:11.0:19025:*:*:*:*:*:* Versions 11.0 19025 Vulnerable ·Cayintech
  • cpe:2.3:h:cayintech:cms-60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cayintech
  • cpe:2.3:o:cayintech:cms-40_firmware:9.0:14197:*:*:*:*:*:* Versions 9.0 14197 Vulnerable ·Cayintech
  • cpe:2.3:h:cayintech:cms-40:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cayintech
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:cayintech:cms-40_firmware:9.0:14199:*:*:*:*:*:*9.0 14199VulnerableCayintech
cpe:2.3:o:cayintech:cms-40_firmware:9.0:14093:*:*:*:*:*:*9.0 14093VulnerableCayintech
cpe:2.3:o:cayintech:cms-20_firmware:9.0:14197:*:*:*:*:*:*9.0 14197VulnerableCayintech
cpe:2.3:h:cayintech:cms-20:-:*:*:*:*:*:*:*not specified by NVDRunning onCayintech
cpe:2.3:o:cayintech:cms-20_firmware:9.0:14092:*:*:*:*:*:*9.0 14092VulnerableCayintech
cpe:2.3:o:cayintech:cms:7.5:11175:*:*:*:*:*:*7.5 11175VulnerableCayintech
cpe:2.3:o:cayintech:cms:8.0:11175:*:*:*:*:*:*8.0 11175VulnerableCayintech
cpe:2.3:o:cayintech:cms:8.2:12199:*:*:*:*:*:*8.2 12199VulnerableCayintech
  • cpe:2.3:o:cayintech:cms-40_firmware:9.0:14199:*:*:*:*:*:* Versions 9.0 14199 Vulnerable ·Cayintech
  • cpe:2.3:o:cayintech:cms-40_firmware:9.0:14093:*:*:*:*:*:* Versions 9.0 14093 Vulnerable ·Cayintech
  • cpe:2.3:o:cayintech:cms-20_firmware:9.0:14197:*:*:*:*:*:* Versions 9.0 14197 Vulnerable ·Cayintech
  • cpe:2.3:h:cayintech:cms-20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cayintech
  • cpe:2.3:o:cayintech:cms-20_firmware:9.0:14092:*:*:*:*:*:* Versions 9.0 14092 Vulnerable ·Cayintech
  • cpe:2.3:o:cayintech:cms:7.5:11175:*:*:*:*:*:* Versions 7.5 11175 Vulnerable ·Cayintech
  • cpe:2.3:o:cayintech:cms:8.0:11175:*:*:*:*:*:* Versions 8.0 11175 Vulnerable ·Cayintech
  • cpe:2.3:o:cayintech:cms:8.2:12199:*:*:*:*:*:* Versions 8.2 12199 Vulnerable ·Cayintech

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7357
  2. 2026-10-03 Alias added: GHSA-7qhp-fg3p-fvch

References

Exploit 2

  • TI-2020-19045 Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter CVSS 4.0HIGH 8.7
  • TI-2026-55464 CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload CVSS 4.0HIGH 8.6
  • TI-2024-07164 CAYIN Technology CMS - Sensitive File Download CVSS 3.1HIGH 7.5
  • TI-2026-55465 CAYIN Technology｜CAYIN CMS-WS/CMS-SE - Missing Authentication CVSS 4.0MEDIUM 6.9
  • TI-2024-07163 CAYIN Technology CMS - OS Command Injection CVSS 3.1HIGH 7.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences