CVEvulnerability
CVE-2020-36916
8.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-01-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.5 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-732
Description
TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system access.
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/190627 exchange.xforce.ibmcloud.com
- https://packetstorm.news/files/id/159723 packetstorm.news
- https://pro.sony/en_NL/products/display-software/tdm-ds1y-tdm-ds3y pro.sony
- https://www.exploit-db.com/exploits/48953 www.exploit-db.com
- https://www.tdmsignage.com www.tdmsignage.com
- https://www.vulncheck.com/advisories/tdm-digital-signage-pc-player-privilege-escalation-via-insecure-permissions www.vulncheck.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5604.php www.zeroscience.mk
- https://www.exploit-db.com/exploits/48953 www.exploit-db.com