CVE Intelligence

Guangzhou Yeroo Tech Co., Ltd. iDS6 DSSPro Digital Signage System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Guangzhou Yeroo Tech Co., Ltd. iDS6 DSSPro Digital Signage System: 1 record(s), with affected versions and fixes.

CVE-2020-36917 High · 7.5 CWE-319 Jan 6, 2026
iDS6 DSSPro Digital Signage System 6.2 Cleartext Password Disclosure via Cookie
iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.