CVE-2020-36916 | BDVDB-2026-309196 Detail
TdmsignageTDM Digital Signage PC Player
Description#
TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system access.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-732 Incorrect Permission Assignment for Critical Resource
References#
- https://www.exploit-db.com/exploits/48953
- https://www.tdmsignage.com
- https://pro.sony/en_NL/products/display-software/tdm-ds1y-tdm-ds3y
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5604.php
- https://packetstorm.news/files/id/159723
- https://exchange.xforce.ibmcloud.com/vulnerabilities/190627
- https://www.vulncheck.com/advisories/tdm-digital-signage-pc-player-privilege-escalation-via-insecure-permissions
Exploit#
History#
- Version 1Record published in the CVE List.