PT-2026-1453 · Yerootech · Ids6 Dsspro Digital Signage System

Published 2026-01-06 · Updated 2026-01-06 · CVE-2020-36920

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iDS6 DSSPro Digital Signage System version 6.2

Description Improper access control allows authenticated users to elevate privileges using console JavaScript functions. By exploiting insecure direct object references (IDOR), which occur when an application provides direct access to objects based on user-supplied input, attackers can create users, modify roles and permissions, and potentially achieve full application takeover.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-36920

Affected Products

Ids6 Dsspro Digital Signage System

References · 8

• 🔥 https://exploit-db.com/exploits/48992 · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2020110025 · Exploit
• 🔥 https://packetstorm.news/files/id/159918 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36920 · Security Note
• https://web.archive.org/web/20200919100215/http://yerootech.com · Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2020-5608.php · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/191260 · Note
• https://vulncheck.com/advisories/ids-dsspro-digital-signage-system-privilege-escalation-via-access-control · Note