QiHang Media Web Digital Signage version 3.0.9 suffers from a pre-authentication remote code execution vulnerability.