CVE-2020-3598

MEDIUM

Cisco Vision Dynamic Signage Director - Unauthenticated Access to Confidential Info and Config Changes

Title source: llm
STIX 2.1

Description

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confidential information or make configuration changes. The vulnerability is due to missing authentication for a specific section of the web-based management interface. An attacker could exploit this vulnerability by accessing a crafted URL. A successful exploit could allow the attacker to obtain access to a section of the interface, which they could use to read confidential information or make configuration changes.

References (1)

Core 1

Scores

CVSS v3 6.5
EPSS 0.0026
EPSS Percentile 49.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-306
Status published
Products (2)
cisco/vision_dynamic_signage_director 6.2.0 (6 CPE variants)
cisco/vision_dynamic_signage_director < 6.2.0
Published Oct 08, 2020
Tracked Since Feb 18, 2026