CVE-2020-5741—Plex Media Server Remote Code Execution Vulnerability

漏洞名称

Plex Media Server Remote Code Execution Vulnerability

描述

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://forums.plex.tv/t/security-regarding-cve-2020-5741/586819
• https://nvd.nist.gov/vuln/detail/CVE-2020-5741

相关新闻文章

• 300k+ Plex Media Server instances still vulnerable to attack via CVE-2025-34158August 27, 2025
• Plex warns users to patch security vulnerability immediatelyAugust 15, 2025

相关 CWE

• CWE-502