Medivision Digital Signage Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:medivision:medivision_digital_signage_firmware:1.5.1:*:*:*:*:*:*:*

part: o version: 1.5.1 update: *

VendorMedivision (f5af064e-fc66-50a5-ae28-2930b9765ccd)
ProductMedivision Digital Signage Firmware (81f3e73a-92c5-5d8d-babd-6499ea6c26fc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36902 vulnerable 2026-06-08 05:25:49.800480 UBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges
UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escalate privileges by manipulating the 'ft[grp]' parameter. Attackers can send a GET request to /html/user with 'ft[grp]' set to integer value '3' to gain super admin rights without authentication.
Published: 2025-12-10T21:05:41.753Z
Updated: 2025-12-11T18:52:29.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36901 vulnerable 2026-06-08 05:25:49.799388 UBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management
UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without proper request validation. Attackers can craft a malicious web page that submits a form to the /query/user/itSet endpoint to add a new admin user with elevated privileges.
Published: 2025-12-10T21:05:21.945Z
Updated: 2025-12-11T18:52:35.866Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.