CVE-2020-36921

6.9 mediumEPSS 0.4%

Medium (6.9). EPSS 0.4% chance of exploitation in the next 30 days.

RED-V Super Digital Signage System 5.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive webserver log files. Attackers can visit multiple endpoints to retrieve system resources and debug log information without authentication.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-548
Published: 2026-01-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://cxsecurity.com/issue/WLB-2020110130
https://exchange.xforce.ibmcloud.com/vulnerabilities/191803
https://packetstormsecurity.com/files/160073
https://www.red-v.tv/
https://www.vulncheck.com/advisories/red-v-super-digital-signage-system-log-information-disclosure-vulnerability

Check your stack JSON