RCE in Cayin Technology Smp-1000
CVE-2020-36910
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.013 (67.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cayin Technology Smp-1000 — versions 1.0 Build 14099
- Cayin Technology Smp-200 — versions 1.0 Build 13080, 1.0 Build 12331
- Cayin Technology Smp-2000 — versions 1.0 Build 14167, 1.0 Build 14087
- Cayin Technology Smp-2100 — versions 10.0 Build 16228, 3.0
- Cayin Technology Smp-2200 — versions 3.0 Build 19029, 3.0 Build 19025
- Cayin Technology Smp-2210 — versions 3.0 Build 19025
- Cayin Technology Smp-2300 — versions 3.0 Build 19316
- Cayin Technology Smp-2310 — versions 3.0
- Cayin Technology Smp-300 — versions 1.0 Build 14177
- Cayin Technology Smp-4000 — versions 1.0 Build 14098, 1.0 Build 14092, 1.0 Build 14087
Weakness classification (CWE)
References
- ExploitDB-48557 (exploit)
- Cayin Technology Official Website (product)
- Zero Science Lab Disclosure (ZSL-2020-5569) (third-party-advisory)
- Packet Storm Security Exploit Entry (exploit)
- IBM X-Force Vulnerability Exchange (vdb-entry)
- CXSecurity Vulnerability Listing (exploit)
- VulnCheck Advisory: Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter (third-party-advisory)
Frequently asked questions
- What is CVE-2020-36910?
- CVE-2020-36910 is a high-severity vulnerability in Cayin Technology Smp-1000, classified under OS Command Injection. CVSS score: 8.8/10. Published 2026-01-06.
- How severe is CVE-2020-36910?
- High severity. CVSS v3 base score is 8.8 out of 10.