Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials

8.7 CVSS

Vulnerability Description

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-36915

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

LiquidWorm as Gjoko Krstic of Zero Science Lab

References

Affected Vendor

Adtecdigital

View all reports →

Affected Software

SignEdje Digital Signage Player, mediaHUB HD-Pro High & Standard Definition MPEG2 Encoder, afiniti Multi-Carrier Platform, EN-31 Dual Channel DSNG Encoder / Modulator, EN-210 Multi-CODEC 10-bit Encoder / Modulator, EN-200 1080p AVC Low Latency Encoder / Modulator, ED-71 10-bit / 1080p Integrated Receiver Decoder, edje-5110 Standard Definition MPEG2 Encoder, edje-4111 HD Digital Media Player, Soloist HD-Pro Broadcast Decoder, adManage Traffic & Media Management Application

Vulnerable Versions:

2.08.28, 3.07.19, 1905_11, 2.01.15, 3.00.29, 2.02.24, 1.02.05, 2.07.09, 2.5.4