high7.5
CVE-2020-36915
Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet,…
Impact
Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/190628
- https://packetstorm.news/files/id/159709
- https://www.adtecdigital.com
- https://www.exploit-db.com/exploits/48954
- https://www.vulncheck.com/advisories/adtec-digital-signedje-digital-signage-player-default-credentials
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5603.php
- https://www.exploit-db.com/exploits/48954