CVE-2020-36921
RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jan 6, 2026
- Updated
- Jan 6, 2026
- Reserved
- Jan 3, 2026
Description
RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files. Attackers can visit multiple endpoints to retrieve system resources and debug log information without authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-548 Exposure of Information Through Directory Listing
Affected Products
| Product | Versions |
|---|---|
RED-V Super Digital Signage System RXV-A740RRED |
|
References
- Zero Science Lab Disclosure (ZSL-2020-5609)third-party-advisory
- Packet Storm Security Exploit Entryexploit
- IBM X-Force Vulnerability Exchangevdb-entry
- CXSecurity Vulnerability Databasethird-party-advisory
- RED-V Vendor Homepageproduct
- VulnCheck Advisory: RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerabilitythird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.