Lucene search
K

CVE-2020-36910

🗓️ 06 Jan 2026 15:52:22Reported by VulnCheckType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 5 Views🌐 WEB

CVE-2020-36910: Cayin Signage Media Player 3.0 permits authenticated remote command injection through NTP_Server_IP.

Related
Detection
Affected
Refs
Paths
Social
[
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-8000QD",
    "versions": [
      {
        "version": "3.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-8000",
    "versions": [
      {
        "version": "3.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-6000",
    "versions": [
      {
        "version": "3.0 Build 19025",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14246",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14199",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14167",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14097",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14090",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14069",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14062",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-4000",
    "versions": [
      {
        "version": "1.0 Build 14098",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14092",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14087",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-2310",
    "versions": [
      {
        "version": "3.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-2300",
    "versions": [
      {
        "version": "3.0 Build 19316",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-2210",
    "versions": [
      {
        "version": "3.0 Build 19025",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-2200",
    "versions": [
      {
        "version": "3.0 Build 19029",
        "status": "affected"
      },
      {
        "version": "3.0 Build 19025",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-2100",
    "versions": [
      {
        "version": "10.0 Build 16228",
        "status": "affected"
      },
      {
        "version": "3.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-2000",
    "versions": [
      {
        "version": "1.0 Build 14167",
        "status": "affected"
      },
      {
        "version": "1.0 Build 14087",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-1000",
    "versions": [
      {
        "version": "1.0 Build 14099",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-PROPLUS",
    "versions": [
      {
        "version": "1.5 Build 10081",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-WEBPLUS",
    "versions": [
      {
        "version": "6.5 Build 11126",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-WEB4",
    "versions": [
      {
        "version": "2.0 Build 13073",
        "status": "affected"
      },
      {
        "version": "2.0 Build 11175",
        "status": "affected"
      },
      {
        "version": "1.5 Build 11476",
        "status": "affected"
      },
      {
        "version": "1.5 Build 11126",
        "status": "affected"
      },
      {
        "version": "1.0 Build 10301",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-300",
    "versions": [
      {
        "version": "1.0 Build 14177",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-200",
    "versions": [
      {
        "version": "1.0 Build 13080",
        "status": "affected"
      },
      {
        "version": "1.0 Build 12331",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-PRO4",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-NEO2",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "CAYIN Technology",
    "product": "SMP-NEO",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
NTP_Server_IPquery paramcgi-bin/system.cgiAuthenticated OS command injection via NTP_Server_IP parameter in system.cgi.CWE-78
NTP_Server_IPquery paramcgi-bin/wizard_system.cgiAuthenticated OS command injection via NTP_Server_IP parameter in wizard_system.cgi.CWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

15 Apr 2026 00:35Current
7.9High risk
Vulners AI Score7.9
CVSS 48.7
CVSS 3.18.8
EPSS0.00533
SSVC
5