CVE-2020-36916

High CVSS: 8.5

TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system access.

Vendor

Product

CWE

CWE-732

Yayın Tarihi

2026-01-06 16:15:47

Güncelleme

2026-01-08 18:09:23

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-732 HIGH 2026

Referanslar

https://exchange.xforce.ibmcloud.com/vulnerabilities/190627 https://packetstorm.news/files/id/159723 https://pro.sony/en_NL/products/display-software/tdm-ds1y-tdm-ds3y https://www.exploit-db.com/exploits/48953 https://www.tdmsignage.com https://www.vulncheck.com/advisories/tdm-digital-signage-pc-player-privilege-escalation-via-insecure-permissions https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5604.php https://www.exploit-db.com/exploits/48953