« Volver al listado

CVE-2020-36910

Estado: AplazadaAlta (8.7)—

Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Acceso remoto autenticado (PR:L) a servicio vulnerable (CWE-78 command injection). Inyección de comandos shell como root implica ejecución de código y escalada de privilegios en máquina remota.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramPrivileged Account ManagementExecution PreventionDisable or Remove Feature or ProgramApplication Isolation and SandboxingExploit Protection

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Cayin — Signage Media PlayerAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-36910",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2020-36910",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-06T19:31:33.067714Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "disclosure@vulncheck.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "disclosure@vulncheck.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 8.7,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "disclosure@vulncheck.com",
      "affectedData": [
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-8000QD",
          "versions": [
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-8000",
          "versions": [
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-6000",
          "versions": [
            {
              "status": "affected",
              "version": "3.0 Build 19025"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14246"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14199"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14167"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14097"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14090"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14069"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14062"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-4000",
          "versions": [
            {
              "status": "affected",
              "version": "1.0 Build 14098"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14092"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14087"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-2310",
          "versions": [
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-2300",
          "versions": [
            {
              "status": "affected",
              "version": "3.0 Build 19316"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-2210",
          "versions": [
            {
              "status": "affected",
              "version": "3.0 Build 19025"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-2200",
          "versions": [
            {
              "status": "affected",
              "version": "3.0 Build 19029"
            },
            {
              "status": "affected",
              "version": "3.0 Build 19025"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-2100",
          "versions": [
            {
              "status": "affected",
              "version": "10.0 Build 16228"
            },
            {
              "status": "affected",
              "version": "3.0"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-2000",
          "versions": [
            {
              "status": "affected",
              "version": "1.0 Build 14167"
            },
            {
              "status": "affected",
              "version": "1.0 Build 14087"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-1000",
          "versions": [
            {
              "status": "affected",
              "version": "1.0 Build 14099"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-PROPLUS",
          "versions": [
            {
              "status": "affected",
              "version": "1.5 Build 10081"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-WEBPLUS",
          "versions": [
            {
              "status": "affected",
              "version": "6.5 Build 11126"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-WEB4",
          "versions": [
            {
              "status": "affected",
              "version": "2.0 Build 13073"
            },
            {
              "status": "affected",
              "version": "2.0 Build 11175"
            },
            {
              "status": "affected",
              "version": "1.5 Build 11476"
            },
            {
              "status": "affected",
              "version": "1.5 Build 11126"
            },
            {
              "status": "affected",
              "version": "1.0 Build 10301"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-300",
          "versions": [
            {
              "status": "affected",
              "version": "1.0 Build 14177"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-200",
          "versions": [
            {
              "status": "affected",
              "version": "1.0 Build 13080"
            },
            {
              "status": "affected",
              "version": "1.0 Build 12331"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-PRO4",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-NEO2",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        },
        {
          "vendor": "CAYIN Technology",
          "product": "SMP-NEO",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-01-06T16:15:46.847",
  "references": [
    {
      "url": "https://cxsecurity.com/issue/WLB-2020060049",
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/182924",
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://packetstorm.news/files/id/157942",
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://www.cayintech.com",
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://www.exploit-db.com/exploits/48557",
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://www.vulncheck.com/advisories/cayin-signage-media-player-authenticated-remote-command-injection-via-ntp-parameter",
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5569.php",
      "source": "disclosure@vulncheck.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "disclosure@vulncheck.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root."
    },
    {
      "lang": "es",
      "value": "Cayin Signage Media Player 3.0 contiene una vulnerabilidad de inyección de comandos remota autenticada en las páginas system.cgi y wizard_system.cgi. Los atacantes pueden explotar el parámetro 'NTP_Server_IP' con credenciales predeterminadas para ejecutar comandos de shell arbitrarios como root."
    }
  ],
  "lastModified": "2026-06-17T03:16:28.963",
  "sourceIdentifier": "disclosure@vulncheck.com"
}