Guangzhou Yeroo Tech Co., Ltd. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Guangzhou Yeroo Tech Co., Ltd. products: 1 record(s), with severity, exploitation and fixes.

iDS6 DSSPro Digital Signage System 1

Exploited only (KEV) →

CVE-2020-36917 High · 7.5 CWE-319 Jan 6, 2026

iDS6 DSSPro Digital Signage System 6.2 Cleartext Password Disclosure via Cookie

iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.