CVE-2020-6954 - An issue was discovered on Cayin SMP-PRO4 devices

Back Back to CVE browser

MEDIUM

An issue was discovered on Cayin SMP-PRO4 devices

Published Jan 13, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 0.96%

Description

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a media_folder.cgi?apply_mode=ping_server URI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (1)

https://nileshsapariya.blogspot.com/2020/01/cayin-smp-pro4-signage-media-player.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://nileshsapariya.blogspot.com/2020/01/cayin-smp-pro4-signage-media-player.html		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 13, 2020

Updated Aug 4, 2024

Reserved Jan 13, 2020

Link CVE-2020-6954

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-6954

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-6954