Medivision Medivision Digital Signage Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Medivision Medivision Digital Signage Firmware: 2 record(s), with affected versions and fixes.
cpe:2.3:o:medivision:medivision_digital_signage_firmware

CVE-2020-36902 Critical · 9.8 CWE-862 Dec 10, 2025

UBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges

UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escalate privileges by manipulating the 'ft[grp]' parameter. Attackers can send a GET request to /html/user with 'ft[grp]' set to integer value '3' to gain super admin rights without authentication.

CVE-2020-36901 High · 8.8 CWE-352 Dec 10, 2025

UBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management

UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without proper request validation. Attackers can craft a malicious web page that submits a form to the /query/user/itSet endpoint to add a new admin user with elevated privileges.