Vulners
Lucene search
RED-V Super Digital Signage System RXV-A740R Log Information Disclosure
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | CVE-2020-36921 | 6 Jan 202616:10 | – | circl |
 | RED-V Super Digital Signage System 安全漏洞 | 6 Jan 202600:00 | – | cnnvd |
 | CVE-2020-36921 | 6 Jan 202615:52 | – | cve |
 | CVE-2020-36921 RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability | 6 Jan 202615:52 | – | cvelist |
 | EUVD-2026-1020 | 6 Jan 202615:52 | – | euvd |
 | CVE-2020-36921 | 6 Jan 202616:15 | – | nvd |
 | PT-2026-1454 | 6 Jan 202600:00 | – | ptsecurity |
 | CVE-2020-36921 RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability | 6 Jan 202615:52 | – | vulnrichment |
<html><body><p>RED-V Super Digital Signage System RXV-A740R Log Information Disclosure
Vendor: RED-V S.R.L.
Product web page: https://www.red-v.tv
https://red-v.tv/digital-signage.html
Affected version: Model name: RXV-A740R
Android version: 5.1.1
Firmware version: 026
Player version: 7.8.6
Downloader version: 7.5.2
Launcher version: 6.8.8
Summary: RED-V Super Digital Signage transforms simple screens
into customized TV channels, delivering audiovisual communication
as immersive user experiences. It is the final blending of years
of know-how in multimedia, mobile and web experience, tablet and
multimedia server design.
Desc: The application is vulnerable to sensitive information disclosure
vulnerability. An unauthenticated attacker can visit several endpoints
and disclose the webserver's log file list containing sensitive system
resources and debug log information running on the device.
Tested on: Apache Struts
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
@zeroscience
Advisory ID: ZSL-2020-5609
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5609.php
26.10.2020
--
1. http://192.168.1.2:8080/downloader.log
2. http://192.168.1.2:8080/launcher.log
3. http://192.168.1.2:8080/player.log
4. http://192.168.1.2:8080/downloader.log_YYYY_MM_DD
5. http://192.168.1.2:8080/launcher.log_YYYY_MM_DD
6. http://192.168.1.2:8080/player.log_YYYY_MM_DD
</p></body></html>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Nov 2020 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 46.9
CVSS 3.17.5
EPSS0.00303
SSVC