CVE-2024-7728 - Vulnerability Details - OpenCVE

The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Cayintech	Cms-se Cms-se\(18.04\) Cms-se\(22.04\)

No data.

No data.

References

Link	Providers
https://resource1.cayintech.com/patch/
https://www.twcert.org.tw/en/cp-139-8002-b6167-2.html
https://www.twcert.org.tw/tw/cp-132-8001-8416d-1.html

History

Wed, 14 Aug 2024 14:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Cayintech Cayintech cms-se Cayintech cms-se\(18.04\) Cayintech cms-se\(22.04\)
CPEs		cpe:2.3:o:cayintech:cms-se:11.0:::::::* cpe:2.3:o:cayintech:cms-se\(18.04\):11.0:::::::* cpe:2.3:o:cayintech:cms-se\(22.04\):11.0:::::::*
Vendors & Products		Cayintech Cayintech cms-se Cayintech cms-se\(18.04\) Cayintech cms-se\(22.04\)
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 14 Aug 2024 04:00:00 +0000

Type	Values Removed	Values Added
References		https://resource1.cayintech.com/patch/

Wed, 14 Aug 2024 03:30:00 +0000

Type	Values Removed	Values Added
Description		The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.
Title		CAYIN Technology CMS - OS Command Injection
Weaknesses		CWE-78
References		https://www.twcert.org.tw/en/cp-139-8002-b6167-2.html https://www.twcert.org.tw/tw/cp-132-8001-8416d-1.html
Metrics		cvssV3_1 `{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: twcert

Published: 2024-08-14T03:26:50.771Z

Updated: 2024-08-14T13:51:41.394Z

Reserved: 2024-08-13T06:08:29.077Z

Link: CVE-2024-7728

Vulnrichment

Updated: 2024-08-14T13:51:32.202Z

NVD

Status : Awaiting Analysis

Published: 2024-08-14T04:15:06.757

Modified: 2024-08-14T13:00:37.107

Link: CVE-2024-7728

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7728", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "PUBLISHED", "assignerShortName": "twcert", "dateReserved": "2024-08-13T06:08:29.077Z", "datePublished": "2024-08-14T03:26:50.771Z", "dateUpdated": "2024-08-14T13:51:41.394Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "CMS-SE(22.04)", "vendor": "CAYIN Technology", "versions": [{"status": "affected", "version": "11.0"}]}, {"defaultStatus": "unaffected", "product": "CMS-SE(18.04)", "vendor": "CAYIN Technology", "versions": [{"status": "affected", "version": "11.0"}]}, {"defaultStatus": "unaffected", "product": "CMS-SE", "vendor": "CAYIN Technology", "versions": [{"status": "affected", "version": "11.0"}]}], "datePublic": "2024-08-14T03:17:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server."}], "value": "The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server."}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2024-08-14T03:53:12.781Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://www.twcert.org.tw/en/cp-139-8002-b6167-2.html"}, {"tags": ["third-party-advisory"], "url": "https://www.twcert.org.tw/tw/cp-132-8001-8416d-1.html"}, {"tags": ["patch"], "url": "https://resource1.cayintech.com/patch/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "For CMS-SE(22.04) v11.0, install patch P23005 or later. <br>For CMS-SE(18.04) v11.0, install patch P23006 or later. <br>For CMS-SE v11.0, Install patch P23007 or later.<br>"}], "value": "For CMS-SE(22.04) v11.0, install patch P23005 or later. \nFor CMS-SE(18.04) v11.0, install patch P23006 or later. \nFor CMS-SE v11.0, Install patch P23007 or later."}], "source": {"advisory": "TVN-202408003", "discovery": "EXTERNAL"}, "title": "CAYIN Technology CMS - OS Command Injection", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "cayintech", "product": "cms-se\\(22.04\\)", "cpes": ["cpe:2.3:o:cayintech:cms-se\\(22.04\\):11.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "11.0", "status": "affected"}]}, {"vendor": "cayintech", "product": "cms-se\\(18.04\\)", "cpes": ["cpe:2.3:o:cayintech:cms-se\\(18.04\\):11.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "11.0", "status": "affected"}]}, {"vendor": "cayintech", "product": "cms-se", "cpes": ["cpe:2.3:o:cayintech:cms-se:11.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "11.0", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-14T13:21:24.823282Z", "id": "CVE-2024-7728", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T13:51:41.394Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-7728", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-14T13:21:24.823282Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:cayintech:cms-se\\(22.04\\):11.0:*:*:*:*:*:*:*"], "vendor": "cayintech", "product": "cms-se\\(22.04\\)", "versions": [{"status": "affected", "version": "11.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:cayintech:cms-se\\(18.04\\):11.0:*:*:*:*:*:*:*"], "vendor": "cayintech", "product": "cms-se\\(18.04\\)", "versions": [{"status": "affected", "version": "11.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:cayintech:cms-se:11.0:*:*:*:*:*:*:*"], "vendor": "cayintech", "product": "cms-se", "versions": [{"status": "affected", "version": "11.0"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T13:51:32.202Z"}}], "cna": {"title": "CAYIN Technology CMS - OS Command Injection", "source": {"advisory": "TVN-202408003", "discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "CAYIN Technology", "product": "CMS-SE(22.04)", "versions": [{"status": "affected", "version": "11.0"}], "defaultStatus": "unaffected"}, {"vendor": "CAYIN Technology", "product": "CMS-SE(18.04)", "versions": [{"status": "affected", "version": "11.0"}], "defaultStatus": "unaffected"}, {"vendor": "CAYIN Technology", "product": "CMS-SE", "versions": [{"status": "affected", "version": "11.0"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "For CMS-SE(22.04) v11.0, install patch P23005 or later. \nFor CMS-SE(18.04) v11.0, install patch P23006 or later. \nFor CMS-SE v11.0, Install patch P23007 or later.", "supportingMedia": [{"type": "text/html", "value": "For CMS-SE(22.04) v11.0, install patch P23005 or later. <br>For CMS-SE(18.04) v11.0, install patch P23006 or later. <br>For CMS-SE v11.0, Install patch P23007 or later.<br>", "base64": false}]}], "datePublic": "2024-08-14T03:17:00.000Z", "references": [{"url": "https://www.twcert.org.tw/en/cp-139-8002-b6167-2.html", "tags": ["third-party-advisory"]}, {"url": "https://www.twcert.org.tw/tw/cp-132-8001-8416d-1.html", "tags": ["third-party-advisory"]}, {"url": "https://resource1.cayintech.com/patch/", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.", "supportingMedia": [{"type": "text/html", "value": "The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2024-08-14T03:53:12.781Z"}}}, "cveMetadata": {"cveId": "CVE-2024-7728", "state": "PUBLISHED", "dateUpdated": "2024-08-14T13:51:41.394Z", "dateReserved": "2024-08-13T06:08:29.077Z", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "datePublished": "2024-08-14T03:26:50.771Z", "assignerShortName": "twcert"}, "dataVersion": "5.1"}