Vulnerability in Adtecdigital Admanage Traffic & Media Management Application
CVE-2020-36915
Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.004 (29.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 29th percentile — 29.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.000
Affected products
- Adtecdigital Admanage Traffic & Media Management Application — versions 2.5.4
- Adtecdigital Afiniti Multi-Carrier Platform — versions 1905_11
- Adtecdigital Ed-71 10-Bit / 1080p Integrated Receiver Decoder — versions 2.02.24
- Adtecdigital Edje-4111 Hd Digital Media Player — versions 2.07.09
- Adtecdigital Edje-5110 Standard Definition Mpeg2 Encoder — versions 1.02.05
- Adtecdigital En-200 1080p Avc Low Latency Encoder / Modulator — versions 3.00.29
- Adtecdigital En-210 Multi-Codec 10-Bit Encoder / Modulator — versions 3.00.29
- Adtecdigital En-31 Dual Channel Dsng Encoder / Modulator — versions 2.01.15
- Adtecdigital Mediahub Hd-Pro High & Standard Definition Mpeg2 Encoder — versions 3.07.19
- Adtecdigital Signedje Digital Signage Player — versions 2.08.28
Weakness classification (CWE)
References
- www.exploit-db.com/exploits/48954 (exploit)
- www.adtecdigital.com (product)
- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5603.php (third-party-advisory)
- packetstorm.news/files/id/159709 (exploit)
- exchange.xforce.ibmcloud.com/vulnerabilities/190628 (vdb-entry)
- www.vulncheck.com/advisories/adtec-digital-signedje-digital-signage-player-defa… (third-party-advisory)
Frequently asked questions
- What is CVE-2020-36915?
- CVE-2020-36915 is a high-severity vulnerability in Adtecdigital Admanage Traffic & Media Management Application, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-01-06.
- How severe is CVE-2020-36915?
- High severity. CVSS v3 base score is 7.5 out of 10.