CVE-2020-36892
Published: 10 December 2025
Summary
CVE-2020-36892 is a critical-severity Missing Authentication for Critical Function (CWE-306) vulnerability in Eibiz I-Media Server Digital Signage. Its CVSS base score is 9.3 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked in the top 39.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-14 (Permitted Actions Without Identification or Authentication) and AC-2 (Account Management).
Deeper analysis
CVE-2020-36892 is an unauthenticated privilege escalation vulnerability affecting Eibiz i-Media Server Digital Signage version 3.8.0. The flaw resides in the updateUser object, which permits attackers to modify user roles without authentication by targeting the /messagebroker/amf endpoint. This issue aligns with CWE-306 (Missing Authentication for Critical Function) and carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its network accessibility and lack of prerequisites.
Remote attackers require no privileges or user interaction to exploit the vulnerability. By sending crafted requests to the vulnerable endpoint, they can manipulate role settings, elevate their privileges, and take over user accounts, potentially gaining full control over the digital signage server.
Advisories detailing the vulnerability, including proof-of-concept exploits, are available from sources such as Exploit-DB (exploit 48774), VulnCheck, and Zero Science Lab (ZSL-2020-5584). The vendor site at eibiz.co.th provides additional context, though specific patch details are not outlined in the provided references. Security practitioners should verify updates directly from the vendor and restrict access to the /messagebroker/amf endpoint.
A public proof-of-concept exploit has been published on Exploit-DB, highlighting active interest from the research community despite the CVE's 2020 designation and its listing published on 2025-12-10.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-30840
Vulnerability details
Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating role…
more
settings without authentication.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unauthenticated remote privilege escalation via public-facing /messagebroker/amf endpoint enables exploitation of public-facing application (T1190) for privilege escalation (T1068) by modifying user roles.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Explicitly defines and restricts actions permitted without identification or authentication, directly preventing unauthenticated access to the updateUser endpoint for role modifications.
Enforces approved access authorizations, blocking unauthorized privilege escalations via the /messagebroker/amf endpoint.
Manages user accounts and associated privileges securely, ensuring roles cannot be modified without proper authorization.