Exploited Vulnerabilities DailyCVE-2020-5741: Plex Media Server
EPSS72.9%No. 703 of 1739 in KEV
CVE year2020~3 yrs before listing
Same vendor in KEV1
Same product1
| Field | Value |
|---|---|
| Vendor | Plex |
| Product | Media Server |
| Name | Plex Media Server Remote Code Execution Vulnerability |
| Added to KEV | 2023-03-10 |
| US federal due date | 2023-03-31 |
| Ransomware use | Unknown |
| CWE | CWE-502 |
CISA description
Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Plex Media Server vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2023-03-10.