CyberRota Analysis
AI-GeneratedCAYIN Technology's CMS-WS, CMS-SE, and SMP series products are vulnerable to an Arbitrary File Upload flaw that allows privileged remote attackers to upload malicious web shells, facilitating arbitrary code execution on the server. This high-severity vulnerability poses significant risks to the integrity and confidentiality of affected systems. Organizations using these products should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.