Vulnerability · Published Jan 6, 2026 · Assigned by VulnCheck
CVE-2020-36916TDM Digital Signage PC Player 4.1.0.4 Privilege Escalation via Insecure Permissions
High 8.8
In plain English
A high-severity incorrect permission assignment in TDM Digital Signage PC Player from Tdmsignage. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.3%top 81.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Tdmsignage | TDM Digital Signage PC Player | 4.1.0.4 |
Weakness: CWE-732 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-48953 exploit
- TDM Digital Signage Official Website product
- Sony Professional Display Software Product Page product
- Zero Science Lab Disclosure (ZSL-2020-5604) third-party-advisory
- Packet Storm Security Exploit Entry exploit
- IBM X-Force Vulnerability Exchange vdb-entry
- VulnCheck Advisory: TDM Digital Signage PC Player 4.1.0.4 Privilege Escalation via Insecure Permissions third-party-advisory