Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:12:59 +0000 CVE-2020-36910 — Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter https://cve.radiocsirt.org/vuln/cve-2020-36910 <p><strong>Affected:</strong> CAYIN Technology SMP-8000QD, CAYIN Technology SMP-8000, CAYIN Technology SMP-6000, CAYIN Technology SMP-4000, CAYIN Technology SMP-2310, CAYIN Technology SMP-2300, CAYIN Technology SMP-2210, CAYIN Technology SMP-2200, CAYIN Technology SMP-2100, CAYIN Technology SMP-2000 and 9 more</p> <p>Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the &#39;NTP_Server_IP&#39; parameter with default credentials to execute arbitrary shell commands as root.</p> <p><strong>Affected:</strong> CAYIN Technology SMP-8000QD, CAYIN Technology SMP-8000, CAYIN Technology SMP-6000, CAYIN Technology SMP-4000, CAYIN Technology SMP-2310, CAYIN Technology SMP-2300, CAYIN Technology SMP-2210, CAYIN Technology SMP-2200, CAYIN Technology SMP-2100, CAYIN Technology SMP-2000 and 9 more</p> <p>Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the &#39;NTP_Server_IP&#39; parameter with default credentials to execute arbitrary shell commands as root.</p> https://cve.radiocsirt.org/vuln/cve-2020-36910