CVE-2020-36893 HIGH

CVE-2020-36893: Eibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability

Vendor Eibiz Co.,Ltd.
Product i-Media Server Digital Signage
Weakness CWE-22 · Path traversal
Published December 10, 2025
Last update December 11, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root directory. Attackers can exploit the 'oldfile' GET parameter to view sensitive configuration files like web.xml and system files such as win.ini.

Key dates

02Disclosure timeline

December 10, 2025 CVE published
December 11, 2025 Record updated