QwikSec

Security Database

CVE

CWE

Training

CVE-2020-36892

Published: Dec 10, 2025

Modified: Apr 7, 2026

PUBLISHED

Description

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating role settings without authentication.

Vendor	Product	Versions
EIBIZ Co.,Ltd.	i-Media Server Digital Signage	affected `0 - <= 3.8.0`

Weaknesses (CWE)

References

ExploitDB-48774

exploit

Vulnerability Advisory

vendor-advisory

technical-description

VulnCheck Advisory: Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.