{"id":"CVE-2020-36915","aliases":["EUVD-2026-1021","GHSA-crvx-wh2g-r65c"],"status":"published","title":"Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials","description":"Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00385,"percentile":0.32852,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1392","CWE-798"],"published":"2026-01-06T15:52:24Z","modified":"2026-06-17T03:16:29Z","products":[{"vendor":"adtecdigital","product":"admanage traffic \u0026 media management application"},{"vendor":"adtecdigital","product":"afiniti multi-carrier platform"},{"vendor":"adtecdigital","product":"ed-71 10-bit / 1080p integrated receiver decoder"},{"vendor":"adtecdigital","product":"edje-4111 hd digital media player"},{"vendor":"adtecdigital","product":"edje-5110 standard definition mpeg2 encoder"},{"vendor":"adtecdigital","product":"en-200 1080p avc low latency encoder / modulator"},{"vendor":"adtecdigital","product":"en-210 multi-codec 10-bit encoder / modulator"},{"vendor":"adtecdigital","product":"en-31 dual channel dsng encoder / modulator"},{"vendor":"adtecdigital","product":"mediahub hd-pro high \u0026 standard definition mpeg2 encoder"},{"vendor":"adtecdigital","product":"signedje digital signage player"},{"vendor":"adtecdigital","product":"soloist hd-pro broadcast decoder"}],"references":[{"url":"https://www.exploit-db.com/exploits/48954","tags":["exploit"]},{"url":"https://www.adtecdigital.com","tags":["product"]},{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5603.php","tags":["third-party-advisory"]},{"url":"https://packetstorm.news/files/id/159709","tags":["exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/190628","tags":["vdb-entry"]},{"url":"https://www.vulncheck.com/advisories/adtec-digital-signedje-digital-signage-player-default-credentials","tags":["third-party-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36915"},{"url":"https://github.com/advisories/GHSA-crvx-wh2g-r65c"}],"sources":{"cve":[{"id":"CVE-2020-36915","title":"Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials","description":"Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.","status":"published","published":"2026-01-06T15:52:24.35Z","modified":"2026-01-06T19:42:42.982Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-798","CWE-1392"],"updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2026-1021","description":"Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.","status":"published","published":"2026-01-06T15:52:24Z","modified":"2026-01-06T19:42:42Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T19:48:55.49901Z"}],"ghsa":[{"id":"GHSA-crvx-wh2g-r65c","title":"Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default...","description":"Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.","status":"published","published":"2026-01-06T18:31:34Z","modified":"2026-01-06T18:31:35Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T15:05:30.549003Z"}],"nvd":[{"id":"CVE-2020-36915","description":"Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.","status":"published","published":"2026-01-06T16:15:47.55Z","modified":"2026-06-17T03:16:29.727Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-798","CWE-1392"],"updated_at":"2026-11-02T14:06:48.591569Z"}]}}