Vulnerabilities

TI-2020-05950 CVE-2020-7357 · GHSA-7qhp-fg3p-fvch

Cayin CMS Command Injection

HIGH 67

Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.32094 Published 2020-08-06 No fix listed CWE-78

TI-2020-05949 CVE-2020-7356 · GHSA-rx8q-gf7p-3fvp

MEDIUM 58

CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.14014 Published 2020-08-06 No fix listed CWE-89

TI-2020-05603 CVE-2020-6954 · GHSA-h945-536j-w2rp

LOW 31

An issue was discovered on Cayin SMP-PRO4 devices.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00957 Published 2020-01-13 No fix listed CWE-200

TI-2020-05604 CVE-2020-6955 · GHSA-rwqg-rx2h-gvc5

LOW 28

An issue was discovered on Cayin SMP-PRO4 devices.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.007 Published 2020-01-13 No fix listed CWE-79