Skip to content
OpenAdvisories

Vendor

EIBIZ

4 known vulnerabilities.

Products

i-Media Server Digital Signage 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2020-36894

    Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability

    Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects to the /messagebroker…

    EIBIZ i-Media Server Digital Signage
  • Critical 9.3
    CVE-2020-36892

    Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation

    Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take…

    EIBIZ i-Media Server Digital Signage