Vulnerabilidades de Medivision

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Medivision: 2 registro(s), com severidade, exploração e correções.

Medivision Digital Signage Firmware 2

Somente exploradas (KEV) →

CVE-2020-36902 Crítica · 9.8 CWE-862 10/12/2025

UBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges

UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escalate privileges by manipulating the 'ft[grp]' parameter. Attackers can send a GET request to /html/user with 'ft[grp]' set to integer value '3' to gain super admin rights without authentication.

CVE-2020-36901 Alta · 8.8 CWE-352 10/12/2025

UBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management

UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without proper request validation. Attackers can craft a malicious web page that submits a form to the /query/user/itSet endpoint to add a new admin user with elevated privileges.