CVE-2020-36915

High CVSS: 8.7

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.

Vendor

Product

CWE

CWE-798

Yayın Tarihi

2026-01-06 16:15:47

Güncelleme

2026-01-08 18:09:23

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-798 HIGH 2026

Referanslar

https://exchange.xforce.ibmcloud.com/vulnerabilities/190628 https://packetstorm.news/files/id/159709 https://www.adtecdigital.com https://www.exploit-db.com/exploits/48954 https://www.vulncheck.com/advisories/adtec-digital-signedje-digital-signage-player-default-credentials https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5603.php https://www.exploit-db.com/exploits/48954