Security Advisory
CVE-2020-36892
9.8
CRITICAL
Vulnerability Description
Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating role settings without authentication.
Published Date
December 10, 2025
Official Source
NIST NVD Advisory