Vulnerability · Published Jan 6, 2026 · Assigned by VulnCheck
CVE-2020-36915Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials
High 7.5
In plain English
A high-severity hard-coded credentials in adManage Traffic & Media Management Application from Adtecdigital. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 67.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.
Affected products (as reported)
Weakness: CWE-798, CWE-1392 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- ExploitDB-48954 exploit
- Adtec Digital Official Homepage product
- Zero Science Lab Disclosure (ZSL-2020-5603) third-party-advisory
- Packet Storm Security Exploit Entry exploit
- IBM X-Force Vulnerability Exchange vdb-entry
- VulnCheck Advisory: Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials third-party-advisory