Vulnerabilities CVE-2020-36910

CVE-2020-36910

High

Open

TLP:CLEAR

Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.

Details

CVSS Score: 8.7
EPSS Score ⓘ: 1.30%

67.7th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jan 6, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.