CVEvulnerability
CVE-2020-36921
6.9 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-01-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 6.9 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-548
Description
RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files. Attackers can visit multiple endpoints to retrieve system resources and debug log information without authentication.
Related
Weakness · CWE (1)
- CWE-548 Exposure of Information Through Directory Listing weakness
References
- https://cxsecurity.com/issue/WLB-2020110130 cxsecurity.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/191803 exchange.xforce.ibmcloud.com
- https://packetstormsecurity.com/files/160073 packetstormsecurity.com
- https://www.red-v.tv/ www.red-v.tv
- https://www.vulncheck.com/advisories/red-v-super-digital-signage-system-log-information-disclosure-vulnerability www.vulncheck.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5609.php www.zeroscience.mk