CVE-2020-36921: fallo de gravedad media en RED-V Super Digital Signage System RXV-A740R
RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.4%
RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files. Attackers can visit multiple endpoints to retrieve system resources and debug log information without authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
RED · RED-V Super Digital Signage System RXV-A740RReferencias
https://cxsecurity.com/issue/WLB-2020110130https://exchange.xforce.ibmcloud.com/vulnerabilities/191803https://packetstormsecurity.com/files/160073https://www.red-v.tv/https://www.vulncheck.com/advisories/red-v-super-digital-signage-system-log-information-disclosure-vulnerabilityhttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5609.php