CVE-2020-36920
iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation via Access Control
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.7EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
06 jan 2026Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
iDS6 DSSPro Digital Signage System 6.2 contains an improper access control vulnerability that allows authenticated users to elevate privileges through console JavaScript functions. Attackers can create users, modify roles and permissions, and potentially achieve full application takeover by exploiting insecure direct object references.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Yerootech · iDS6 DSSPro Digital Signage SystemQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
https://cxsecurity.com/issue/WLB-2020110025https://exchange.xforce.ibmcloud.com/vulnerabilities/191260https://packetstorm.news/files/id/159918https://web.archive.org/web/20200919100215/http://www.yerootech.com/https://www.exploit-db.com/exploits/48992https://www.vulncheck.com/advisories/ids-dsspro-digital-signage-system-privilege-escalation-via-access-controlhttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5608.php