CVE-2020-36915 Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials
Hardcoded default credentials allow unauthenticated remote attackers to gain root access and execute commands on Adtec digital signage devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-36915?
CVE-2020-36915 is a high-severity vulnerability in Adtecdigital ED-71 10-bit / 1080p Integrated Receiver Decoder, published on 6 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec Digital product versions.
Which versions are affected by CVE-2020-36915?
How do I fix CVE-2020-36915?
No fix has been published for CVE-2020-36915 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-36915 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-36915 exists.
Sources
Also known as GHSA-crvx-wh2g-r65c.