# EIBIZ i-Media Server has four flaws, including unauthenticated privilege escalation

- Date: 2025-12-10
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2020-36892, CVE-2020-36893, CVE-2020-36894, CVE-2020-36895

NVD published 4 vulnerabilities in EIBIZ i-Media Server, covering privilege escalation, path traversal, authentication bypass and insecure object references. In Eibiz i-Media Server Digital Signage 3.8.0, an unauthenticated privilege escalation flaw in the updateUser object lets attackers modify user roles.

## Sources

- [CVE-2020-36892](https://nvd.nist.gov/vuln/detail/CVE-2020-36892) (NIST NVD)
- [CVE-2020-36893](https://nvd.nist.gov/vuln/detail/CVE-2020-36893) (NIST NVD)
- [CVE-2020-36894](https://nvd.nist.gov/vuln/detail/CVE-2020-36894) (NIST NVD)
- [CVE-2020-36895](https://nvd.nist.gov/vuln/detail/CVE-2020-36895) (NIST NVD)
- [http://www.eibiz.co.th](http://www.eibiz.co.th)
- [https://www.exploit-db.com/exploits/48774](https://www.exploit-db.com/exploits/48774)

Page: https://signagelist.org/incidents/2025-12-eibiz-i-media-server-has-four-flaws/