CVE-2024-7729

Description

The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.

Affected Platforms

Weakness Type

CWE-552

References

• https://resource1.cayintech.com/patch/
• https://www.twcert.org.tw/en/cp-139-8004-ed9aa-2.html
• https://www.twcert.org.tw/tw/cp-132-8003-5543e-1.html