CVE record · CVE-2020-36915

Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials

CVSS 8.7 HighEPSS 0.0039 · 32nd percentile

Published by the CVE Program (CNA: VulnCheck) at 6 Jan 2026, 15:52 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Adtecdigital	SignEdje Digital Signage Player	affected 2.08.28
Adtecdigital	mediaHUB HD-Pro High & Standard Definition MPEG2 Encoder	affected 3.07.19
Adtecdigital	afiniti Multi-Carrier Platform	affected 1905_11
Adtecdigital	EN-31 Dual Channel DSNG Encoder / Modulator	affected 2.01.15
Adtecdigital	EN-210 Multi-CODEC 10-bit Encoder / Modulator	affected 3.00.29
Adtecdigital	EN-200 1080p AVC Low Latency Encoder / Modulator	affected 3.00.29
Adtecdigital	ED-71 10-bit / 1080p Integrated Receiver Decoder	affected 2.02.24
Adtecdigital	edje-5110 Standard Definition MPEG2 Encoder	affected 1.02.05
Adtecdigital	edje-4111 HD Digital Media Player	affected 2.07.09
Adtecdigital	Soloist HD-Pro Broadcast Decoder	affected 2.07.09
Adtecdigital	adManage Traffic & Media Management Application	affected 2.5.4

Identifiers: CVE-2020-36915
CNA: VulnCheck
Weakness (CWE): CWE-798 · CWE-1392
Tags: Adtecdigital SignEdje Digital Signage Player
Adtecdigital mediaHUB HD-Pro High & Standard Definition MPEG2 Encoder
Adtecdigital afiniti Multi-Carrier Platform
Adtecdigital EN-31 Dual Channel DSNG Encoder / Modulator
Adtecdigital EN-210 Multi-CODEC 10-bit Encoder / Modulator
Adtecdigital EN-200 1080p AVC Low Latency Encoder / Modulator
Adtecdigital ED-71 10-bit / 1080p Integrated Receiver Decoder
Adtecdigital edje-5110 Standard Definition MPEG2 Encoder
Hard-coded credentials
CWE-1392
Published: 6 Jan 2026
Updated: 6 Jan 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
8.7	High	4.0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	CNA (VulnCheck)Used for this record
7.5	High	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	CNA (VulnCheck)

CISA KEV Not listed.
EPSS 0.0039, the 32nd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 6 Jan 2026. New records show when each source confirmed them.

Sources

References from the CNA

www.adtecdigital.com product
www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5603.php third-party-advisory
exchange.xforce.ibmcloud.com/vulnerabilities/190628 vdb-entry
www.vulncheck.com/advisories/adtec-digital-signedje-digital-signage-player-default-credentials third-party-advisory
www.exploit-db.com/exploits/48954 exploit
packetstorm.news/files/id/159709 exploit

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.