CVE-2020-36915highCWE-1392CWE-798

CVE-2020-36915: fallo de gravedad alta en Adtecdigital SignEdje Digital Signage Player

Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials

Publicada el

Seguir esta CVE+ Monitorear adManage Traffic & Media Management Application+ Monitorear afiniti Multi-Carrier Platform

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.4%
Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Adtecdigital · adManage Traffic & Media Management ApplicationAdtecdigital · afiniti Multi-Carrier PlatformAdtecdigital · ED-71 10-bit / 1080p Integrated Receiver DecoderAdtecdigital · edje-4111 HD Digital Media PlayerAdtecdigital · edje-5110 Standard Definition MPEG2 EncoderAdtecdigital · EN-200 1080p AVC Low Latency Encoder / ModulatorAdtecdigital · EN-210 Multi-CODEC 10-bit Encoder / ModulatorAdtecdigital · EN-31 Dual Channel DSNG Encoder / ModulatorAdtecdigital · mediaHUB HD-Pro High & Standard Definition MPEG2 EncoderAdtecdigital · SignEdje Digital Signage PlayerAdtecdigital · Soloist HD-Pro Broadcast Decoder