PT-2026-1452 · Yerootech · Ids6 Dsspro Digital Signage System

Published 2026-01-06 · Updated 2026-01-06 · CVE-2020-36918

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions iDS6 DSSPro Digital Signage System version 6.2

Description Cross-site request forgery occurs due to a lack of request validation, allowing attackers to perform administrative actions. By crafting malicious web pages, attackers can trick authenticated administrators into adding unauthorized users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-36918

Affected Products

Ids6 Dsspro Digital Signage System

References · 8

• 🔥 https://cxsecurity.com/issue/WLB-2020110022 · Exploit
• 🔥 https://packetstormsecurity.com/files/159916 · Exploit
• 🔥 https://exploit-db.com/exploits/48990 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36918 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/191258 · Note
• https://web.archive.org/web/20200919100215/http://yerootech.com · Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2020-5606.php · Note
• https://vulncheck.com/advisories/ids-dsspro-digital-signage-system-cross-site-request-forgery-via-user-management · Note