CVE-2020-36920

🗓️ 06 Jan 2026 15:52:26Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 16 Views🌐 WEB

Privilege escalation in iDS6 DSSPro 6.2 due to improper access control enabling authenticated users to create users and modify roles.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2020-36920	6 Jan 202616:10	–	circl
CNNVD	Phoenix Contact iDS6 DSSPro 安全漏洞	6 Jan 202600:00	–	cnnvd
Cvelist	CVE-2020-36920 iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation via Access Control	6 Jan 202615:52	–	cvelist
EUVD	EUVD-2026-1019	6 Jan 202615:52	–	euvd
NVD	CVE-2020-36920	6 Jan 202616:15	–	nvd
Positive Technologies	PT-2026-1453	6 Jan 202600:00	–	ptsecurity
Vulnrichment	CVE-2020-36920 iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation via Access Control	6 Jan 202615:52	–	vulnrichment
Zero Science Lab	iDS6 DSSPro Digital Signage System 6.2 Improper Access Control Privilege Escalation	4 Nov 202000:00	–	zeroscience

Vulners

Node

yerootech ids6_dsspro_digital_signage_systemMatch6.2

[
  {
    "vendor": "Yerootech",
    "product": "iDS6 DSSPro Digital Signage System",
    "versions": [
      {
        "version": "6.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
cxsecurity	www.cxsecurity.com/issue/WLB-2020110025
vulncheck	www.vulncheck.com/advisories/ids-dsspro-digital-signage-system-privilege-escalation-via-access-control
web	www.web.archive.org/web/20200919100215/http://www.yerootech.com/
exploit-db	www.exploit-db.com/exploits/48992
packetstorm	www.packetstorm.news/files/id/159918
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/191260
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5608.php

Parameter	Position	Path	Description	CWE
user.userName	request body	/Pages/user!addUser	Authenticated user can create new users via console or direct requests.	CWE-863
user.password	request body	/Pages/user!addUser	Authenticated user can create new users via console or direct requests.	CWE-863
az	request body	/Pages/user!list	Authenticated user can enumerate users via list endpoint.	CWE-863
role.roleName	request body	/Pages/role!add	Authenticated user can create roles via direct requests.	CWE-863
role.description	request body	/Pages/role!add	Authenticated user can create roles via direct requests.	CWE-863
az	request body	/Pages/role!list	Authenticated user can enumerate roles via list endpoint.	CWE-863
role.roleId	request body	/Pages/role!updatePermissions	Authenticated user can grant privileges to a role via updatePermissions.	CWE-863
privileges	request body	/Pages/role!updatePermissions	Authenticated user can grant privileges to a role via updatePermissions.	CWE-863
user.userId	request body	/Pages/user!updateRole	Authenticated user can assign roles to a user.	CWE-863
roles	request body	/Pages/user!updateRole	Authenticated user can assign roles to a user.	CWE-863

17 Jun 2026 03:16Current

6.4Medium risk

Vulners AI Score6.4

CVSS 48.7

CVSS 3.18.8

EPSS0.00315

SSVC

CWE-863