QwikSec

Security Database

CVE

CWE

Training

CVE-2020-36902

Published: Dec 10, 2025

Modified: Dec 11, 2025

PUBLISHED

Description

UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escalate privileges by manipulating the 'ft[grp]' parameter. Attackers can send a GET request to /html/user with 'ft[grp]' set to integer value '3' to gain super admin rights without authentication.

Vendor	Product	Versions
UBICOD Co., Ltd. \| MEDIVISION INC.	UBICOD Medivision Digital Signage	affected `Firmware 1.5.1 (2013.01.3)`

Weaknesses (CWE)

References

ExploitDB-48684

exploit

UBICOD Co., Ltd. | MEDIVISION INC.

product

Zero Security Advisory ZSL-2020-5575

vendor-advisory

VulnCheck Advisory: UBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.