CVE-2020-36916

Published: Jan 6, 2026Modified: Jun 17, 2026Deferred

8.5

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system access.

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (8)

https://exchange.xforce.ibmcloud.com/vulnerabilities/190627

Source: disclosure@vulncheck.com

https://packetstorm.news/files/id/159723

Source: disclosure@vulncheck.com

https://pro.sony/en_NL/products/display-software/tdm-ds1y-tdm-ds3y

Source: disclosure@vulncheck.com

https://www.exploit-db.com/exploits/48953

Source: disclosure@vulncheck.com

https://www.tdmsignage.com

Source: disclosure@vulncheck.com

https://www.vulncheck.com/advisories/tdm-digital-signage-pc-player-privilege-escalation-via-insecure-permissions

Source: disclosure@vulncheck.com

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5604.php

Source: disclosure@vulncheck.com

https://www.exploit-db.com/exploits/48953

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.