CVE-2024-7728
CAYIN Technology CMS - OS Command Injection
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.2EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
14 Aug 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
CAYIN Technology · CMS-SECAYIN Technology · CMS-SE(18.04)CAYIN Technology · CMS-SE(22.04)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →