Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Cayintech Subscribe
Filtered by product Smp-pro4 Firmware
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-6954 1 Cayintech 2 Smp-pro4, Smp-pro4 Firmware 2021-07-21 4.0 MEDIUM 6.5 MEDIUM
An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a media_folder.cgi?apply_mode=ping_server URI.
CVE-2020-6955 1 Cayintech 2 Smp-pro4, Smp-pro4 Firmware 2020-01-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS.