Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.
CVSS v4.0 Metrics
Exploitability
Attack VectorNetwork
ComplexityLow
RequirementsNone
PrivilegesLow
User InteractionNone
Threat
Exploit MaturityUnreported
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Change Log
| Date | Source | Changes | Score |
|---|
| 2026-07-21 | cve.org | initial, patch: Unavailable | 6.3 |
Affected Software
| Vendor | Product | Version |
|---|
| CAYIN Technology | SMP-1000 | 1.0 Build 14099 |
| CAYIN Technology | SMP-200 | 1.0 Build 12331 |
| CAYIN Technology | SMP-200 | 1.0 Build 13080 |
| CAYIN Technology | SMP-2000 | 1.0 Build 14087 |
| CAYIN Technology | SMP-2000 | 1.0 Build 14167 |
| CAYIN Technology | SMP-2100 | 10.0 Build 16228 |
| CAYIN Technology | SMP-2100 | 3.0 |
| CAYIN Technology | SMP-2200 | 3.0 Build 19025 |
| CAYIN Technology | SMP-2200 | 3.0 Build 19029 |
| CAYIN Technology | SMP-2210 | 3.0 Build 19025 |
| CAYIN Technology | SMP-2300 | 3.0 Build 19316 |
| CAYIN Technology | SMP-2310 | 3.0 |
| CAYIN Technology | SMP-300 | 1.0 Build 14177 |
| CAYIN Technology | SMP-4000 | 1.0 Build 14087 |
| CAYIN Technology | SMP-4000 | 1.0 Build 14092 |
| CAYIN Technology | SMP-4000 | 1.0 Build 14098 |
| CAYIN Technology | SMP-6000 | 1.0 Build 14062 |
| CAYIN Technology | SMP-6000 | 1.0 Build 14069 |
| CAYIN Technology | SMP-6000 | 1.0 Build 14090 |
| CAYIN Technology | SMP-6000 | 1.0 Build 14097 |
| CAYIN Technology | SMP-6000 | 1.0 Build 14167 |
| CAYIN Technology | SMP-6000 | 1.0 Build 14199 |
| CAYIN Technology | SMP-6000 | 1.0 Build 14246 |
| CAYIN Technology | SMP-6000 | 3.0 Build 19025 |
| CAYIN Technology | SMP-8000 | 3.0 |
| CAYIN Technology | SMP-8000QD | 3.0 |
| CAYIN Technology | SMP-NEO | 1.0 |
| CAYIN Technology | SMP-NEO2 | 1.0 |
| CAYIN Technology | SMP-PRO4 | 1.0 |
| CAYIN Technology | SMP-PROPLUS | 1.5 Build 10081 |
| CAYIN Technology | SMP-WEB4 | 1.0 Build 10301 |
| CAYIN Technology | SMP-WEB4 | 1.5 Build 11126 |
| CAYIN Technology | SMP-WEB4 | 1.5 Build 11476 |
| CAYIN Technology | SMP-WEB4 | 2.0 Build 11175 |
| CAYIN Technology | SMP-WEB4 | 2.0 Build 13073 |
| CAYIN Technology | SMP-WEBPLUS | 6.5 Build 11126 |
Published: 2026-01-06
