Vulnerabilidades do Medivision Medivision Digital Signage Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Medivision Medivision Digital Signage Firmware: 2 registro(s), com versões afetadas e correções.
cpe:2.3:o:medivision:medivision_digital_signage_firmware

CVE-2020-36902 Crítica · 9.8 CWE-862 10/12/2025

UBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges

UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escalate privileges by manipulating the 'ft[grp]' parameter. Attackers can send a GET request to /html/user with 'ft[grp]' set to integer value '3' to gain super admin rights without authentication.

CVE-2020-36901 Alta · 8.8 CWE-352 10/12/2025

UBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management

UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without proper request validation. Attackers can craft a malicious web page that submits a form to the /query/user/itSet endpoint to add a new admin user with elevated privileges.