Dear CMND customers,

We are writing to notify you of two critical security vulnerabilities recently identified in PHP that impact your CMND software environment.

Our teams are currently finalizing a new release (CMND 8.x) containing up to date software components with latest patches. In the meantime, we strongly advise implementing the following measures immediately to safeguard your network (see attached):

• Eliminate Internet Exposure: Ensure the CMND web interface is not accessible via public IP addresses or port-forwarding (NAT) rules. Please verify restricted access from an external network (e.g., via a mobile cellular connection).
• Segment the Internal Network: Limit local network (LAN) access to the CMND server exclusively to required tv networks and administrative workstations. Ensure guest, Wi-Fi, and visitor networks have no direct route to the server.
• Restrict Outbound Traffic: Block the CMND server from initiating outbound connections to the internet. This prevents unauthorized downloads or sending data out in the event of an attempted compromise.

We will notify you as soon as the CMND 8.x security release is available for download via cmnd.io. More information

Should you have any technical questions, please contact our support team at PPDS Technical Support.

Best regards,

PPDS Technical Support Team