Skip to content
Fencer Vulns
high 7.5

CVE-2020-36915 json

Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials

published 2026-01-06 10 mo ago modified 2026-06-17 4 mo ago also EUVD-2026-1021

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 32%
public exploits
0
none known

Summary

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
partial
Assessed
10 mo ago

Exploit prediction

0.39% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • exploit-db.com https://www.exploit-db.com/exploits/48954 referenced PoC, tagged "exploit" by a source, unverified
  • packetstorm.news https://packetstorm.news/files/id/159709 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Adtecdigital SignEdje Digital Signage Player
  • Adtecdigital mediaHUB HD-Pro High & Standard Definition MPEG2 Encoder
  • Adtecdigital afiniti Multi-Carrier Platform
  • Adtecdigital EN-31 Dual Channel DSNG Encoder / Modulator
  • Adtecdigital EN-210 Multi-CODEC 10-bit Encoder / Modulator
  • Adtecdigital EN-200 1080p AVC Low Latency Encoder / Modulator
  • Adtecdigital ED-71 10-bit / 1080p Integrated Receiver Decoder
  • Adtecdigital edje-5110 Standard Definition MPEG2 Encoder
  • Adtecdigital edje-4111 HD Digital Media Player
  • Adtecdigital Soloist HD-Pro Broadcast Decoder
  • Adtecdigital adManage Traffic & Media Management Application

Classification

Weakness
  • CWE-798 Use of Hard-coded Credentials
  • CWE-1392 Use of Default Credentials

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.