CVE-2020-7357 Cayin CMS Command Injection
Authenticated attackers can execute arbitrary shell commands as root via the NTP server IP parameter in Cayin CMS.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-7357?
CVE-2020-7357 is a critical command injection vulnerability in Cayin CMS, published on 6 Aug 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cgi page. This issue affects several branches and versions of the CMS application, including CME-SE, CMS-60, CMS-40, CMS-20, and CMS version 8.2, 8.0, and 7.5.
Weakness: CWE-78
Which versions are affected by CVE-2020-7357?
It affects 6 products.
Products include Cayintech Cms, Cayintech Cms-20 Firmware, Cayintech Cms-40 Firmware, Cayintech Cms-60 Firmware, Cayintech Cms-Se-Lxc Firmware, Cayintech Cms-Se Firmware.
How do I fix CVE-2020-7357?
No fix has been published for CVE-2020-7357 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2020-7357 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-7357 exists.
Public exploit code: 1 Metasploit module.
Sources
Also known as GHSA-7qhp-fg3p-fvch.