CVEvulnerability
CVE-2020-36915
8.7 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-01-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.7 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-1392, CWE-798
Description
Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.
Related
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/190628 exchange.xforce.ibmcloud.com
- https://packetstorm.news/files/id/159709 packetstorm.news
- https://www.adtecdigital.com www.adtecdigital.com
- https://www.exploit-db.com/exploits/48954 www.exploit-db.com
- https://www.vulncheck.com/advisories/adtec-digital-signedje-digital-signage-player-default-credentials www.vulncheck.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5603.php www.zeroscience.mk
- https://www.exploit-db.com/exploits/48954 www.exploit-db.com