Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-3598

Опубликовано: 08 окт. 2020
Источник: nvd
CVSS3: 6.5
CVSS2: 6.4
EPSS Низкий

Описание

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confidential information or make configuration changes. The vulnerability is due to missing authentication for a specific section of the web-based management interface. An attacker could exploit this vulnerability by accessing a crafted URL. A successful exploit could allow the attacker to obtain access to a section of the interface, which they could use to read confidential information or make configuration changes.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:vision_dynamic_signage_director:*:*:*:*:*:*:*:*
Версия до 6.2.0 (исключая)
cpe:2.3:a:cisco:vision_dynamic_signage_director:6.2.0:-:*:*:*:*:*:*
cpe:2.3:a:cisco:vision_dynamic_signage_director:6.2.0:sp1:*:*:*:*:*:*
cpe:2.3:a:cisco:vision_dynamic_signage_director:6.2.0:sp2:*:*:*:*:*:*
cpe:2.3:a:cisco:vision_dynamic_signage_director:6.2.0:sp3:*:*:*:*:*:*
cpe:2.3:a:cisco:vision_dynamic_signage_director:6.2.0:sp4:*:*:*:*:*:*
cpe:2.3:a:cisco:vision_dynamic_signage_director:6.2.0:sp5:*:*:*:*:*:*

EPSS

Процентиль: 49%
0.00256
Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-306
CWE-306

Связанные уязвимости

github
больше 3 лет назад

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confidential information or make configuration changes. The vulnerability is due to missing authentication for a specific section of the web-based management interface. An attacker could exploit this vulnerability by accessing a crafted URL. A successful exploit could allow the attacker to obtain access to a section of the interface, which they could use to read confidential information or make configuration changes.

CVSS3: 6.5
fstec
больше 5 лет назад

Уязвимость веб-интерфейса системы управления цифровым контентом Cisco Vision Dynamic Signage Director, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 49%
0.00256
Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-306
CWE-306