CVE-2020-37228Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. Attackers can retrieve valid CAPTCHA codes via the login endpoint and use them to perform brute-force attacks against user accounts.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-307

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud145d
Disclosure
🚨*CVE* CVE-2020-37228 iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVeri… https://www.cve.org/CVERecord?id=CVE-2020-37228 ----- Traducción: CVE-2020-37228 iDS… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2020‑37228, a CAPTCHA bypass that permits authentication bypass in the iDS6 DSSPro Digital Signage System 6.2, without providing a PoC, exploit, patch, or evidence of active exploitation.
0000027
78 followersView on X
CVE@CVEnew145d
General
CVE-2020-37228 iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVeri… https://www.cve.org/CVERecord?id=CVE-2020-37228
Post summary
CVE-2020-37228 is a CAPTCHA bypass that permits authentication bypass on iDS6 DSSPro Digital Signage System 6.2; no PoC, exploit, patch, or active exploitation information is provided.
00000280
57.5K followersView on X

Explore more

Back to dashboard