CVE-2020-36915

Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials

State: Published
Severity: 8.7 High
Published: Jan 6, 2026
Updated: Jan 6, 2026
Reserved: Jan 3, 2026

Description

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	VulnCheck
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	VulnCheck

Weaknesses

CWE-798 Use of Hard-coded Credentials
CWE-1392 Use of Default Credentials

Affected Products

Product	Versions
SignEdje Digital Signage PlayerAdtecdigital	2.08.28Affected
mediaHUB HD-Pro High & Standard Definition MPEG2 EncoderAdtecdigital	3.07.19Affected
afiniti Multi-Carrier PlatformAdtecdigital	1905_11Affected
EN-31 Dual Channel DSNG Encoder / ModulatorAdtecdigital	2.01.15Affected
EN-210 Multi-CODEC 10-bit Encoder / ModulatorAdtecdigital	3.00.29Affected
EN-200 1080p AVC Low Latency Encoder / ModulatorAdtecdigital	3.00.29Affected
ED-71 10-bit / 1080p Integrated Receiver DecoderAdtecdigital	2.02.24Affected
edje-5110 Standard Definition MPEG2 EncoderAdtecdigital	1.02.05Affected
edje-4111 HD Digital Media PlayerAdtecdigital	2.07.09Affected
Soloist HD-Pro Broadcast DecoderAdtecdigital	2.07.09Affected
adManage Traffic & Media Management ApplicationAdtecdigital	2.5.4Affected

References

ExploitDB-48954exploit
Adtec Digital Official Homepageproduct
Zero Science Lab Disclosure (ZSL-2020-5603)third-party-advisory
Packet Storm Security Exploit Entryexploit
IBM X-Force Vulnerability Exchangevdb-entry
VulnCheck Advisory: Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentialsthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.