CVE-2020-36921 | BDVDB-2026-309200 Detail
REDRED-V Super Digital Signage System RXV-A740R
Description#
RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files. Attackers can visit multiple endpoints to retrieve system resources and debug log information without authentication.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-548 Exposure of Information Through Directory Listing
References#
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5609.php
- https://packetstormsecurity.com/files/160073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/191803
- https://cxsecurity.com/issue/WLB-2020110130
- https://www.red-v.tv/
- https://www.vulncheck.com/advisories/red-v-super-digital-signage-system-log-information-disclosure-vulnerability
Exploit#
History#
- Version 1Record published in the CVE List.