CVE-2024-7728: CAYIN Technology CMS - OS Command Injection

Published Aug 14, 2024

Updated

The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.

Affected Software

1 affected component

CAYIN Technology CMS

Remediation

Information

For CMS-SE(22.04) v11.0, install patch P23005 or later. For CMS-SE(18.04) v11.0, install patch P23006 or later. For CMS-SE v11.0, Install patch P23007 or later.

Event History

Aug 14, 2024

CVE Published

via MITRE·03:26 AM

Data Sourced

via MITRE·03:26 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-7728?

CVE-2024-7728 has a high severity rating due to its potential to allow remote command injection.

How do I fix CVE-2024-7728?

To fix CVE-2024-7728, ensure that input validation is properly implemented in the affected CGI to prevent command injection.

Who is affected by CVE-2024-7728?

CVE-2024-7728 affects users of the CAYIN Technology CMS that utilize the vulnerable CGI component.

What kind of attack can CVE-2024-7728 enable?

CVE-2024-7728 can enable remote attackers with administrative privileges to execute arbitrary OS commands on the server.

Is there a patch available for CVE-2024-7728?

Yes, a patch for CVE-2024-7728 is available from CAYIN Technology to mitigate the vulnerability.