PT-2026-1446 · Unknown · Plexus Anblick Digital Signage Management

CVE-2020-36912 · Publicado 2026-01-06 · Atualizado 2026-01-06

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Plexus anblick Digital Signage Management version 3.1.13

Description The software contains an open redirect issue within the 'PantallaLogin' script. This allows manipulation of the pagina GET parameter, enabling attackers to redirect users to arbitrary websites due to insufficient input validation. The affected API endpoint is likely a login screen or similar functionality.

Recommendations Ensure proper input validation is implemented for the pagina parameter in the 'PantallaLogin' script.

Exploit

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2020-36912

Produtos afetados

Plexus Anblick Digital Signage Management

Referências · 7

• 🔥 https://packetstormsecurity.com/files/158473 · Exploit
• https://zeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php · Nota
• https://vulncheck.com/advisories/plexus-anblick-digital-signage-management-open-redirect-via-pagina-parameter · Nota
• https://t.me/cveNotify/147864 · Publicação no Telegram
• https://plexus.es · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/185521 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36912 · Nota de Segurança