i-media server digital signage vulnerabilities and fixes

Recent CVEs affecting i-media server digital signage, with upgrade or downgrade steps. 4 tracked.

Also searched as: i media server digital signage, i-mediaserverdigitalsignage.

i-media server digital signage has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-12-10. Highest priority: CVE-2020-36892 (score 63/100).

• CVE-2020-36895 HIGH 7.5 DOWNGRADE EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability
• CVE-2020-36894 HIGH 7.5 DOWNGRADE Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthe
• CVE-2020-36893 HIGH 7.5 DOWNGRADE Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenti
• CVE-2020-36892 CRITICAL 9.8 DOWNGRADE Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in t

FAQ

How do I fix i-media server digital signage vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is i-media server digital signage being exploited right now?

None of the tracked i-media server digital signage CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which i-media server digital signage CVE should I patch first?

CVE-2020-36892 currently ranks highest (63/100): Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in t.

RSS feed for i-media server digital signage · ← Back to latest CVEs