I Media Server Digital Signage
Approved changes feed: RSS · Atom
cpe:2.3:a:eibiz_co.,ltd.:i-media_server_digital_signage:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Eibiz Co.,Ltd. (3abaa1f9-a187-5769-91cf-60433fa1639b) |
|---|---|
| Product | I Media Server Digital Signage (8e6c62f3-4dec-5380-abe8-72ccb2ab03d7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36895 |
vulnerable | 2026-06-08 05:25:49.790840 |
EIBIZ i-Media Server Digital Signage 3.8.0 Unauthenticated Configuration Disclosure
EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability that allows remote attackers to access sensitive configuration files via direct object reference. Attackers can retrieve the SiteConfig.properties file through an HTTP GET request, exposing administrative credentials, database connection details, and system configuration information.
Published: 2025-12-10T20:54:29.438Z
Updated: 2026-10-01T15:19:33.152Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36894 |
vulnerable | 2026-06-08 05:25:49.790518 |
Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability
Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects to the /messagebroker/amf endpoint to create administrative users without authentication, bypassing security controls.
Published: 2025-12-10T20:53:33.232Z
Updated: 2026-10-01T15:19:32.494Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36893 |
vulnerable | 2026-06-08 05:25:49.790044 |
Eibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability
Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root directory. Attackers can exploit the 'oldfile' GET parameter to view sensitive configuration files like web.xml and system files such as win.ini.
Published: 2025-12-10T20:52:52.187Z
Updated: 2026-10-01T15:19:31.839Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36892 |
vulnerable | 2026-06-08 05:25:49.789068 |
Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation
Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating role settings without authentication.
Published: 2025-12-10T20:52:17.172Z
Updated: 2026-10-01T15:19:31.200Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.