Cyber Resilience

CVE-2020-36917

HighPublic PoC

Published: 06 January 2026

Published
06 January 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 8.6 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0028 19.6th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2020-36917 is a high-severity Cleartext Transmission of Sensitive Information (CWE-319) vulnerability in Cxsecurity (inferred from references). Its CVSS base score is 8.6 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Network Sniffing (T1040); ranked at the 19.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 AC-17 (Remote Access) and IA-5 (Authenticator Management).

Deeper analysis

CVE-2020-36917 is a sensitive information disclosure vulnerability in the iDS6 DSSPro Digital Signage System version 6.2. The issue stems from cleartext transmission of cookies over HTTP, allowing remote attackers to intercept authentication credentials, particularly user passwords exposed via the autoSave feature. It is classified under CWE-319 (Cleartext Transmission of Sensitive Information) with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), highlighting high confidentiality impact.

Remote attackers without privileges can exploit this vulnerability by conducting man-in-the-middle (MITM) attacks on HTTP communications. By positioning themselves between users and the server, attackers can capture cookies containing plaintext passwords during autoSave operations, enabling unauthorized access to affected accounts.

Advisories from CXSecurity, IBM X-Force Exchange, Packet Storm Security, and VulnCheck detail the vulnerability and exploitation method, with an archived vendor page at yerootech.com. No specific patches or mitigation steps are outlined in the referenced advisories.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability details

iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1040 Network Sniffing Credential Access
Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network.
T1557 Adversary-in-the-Middle Credential Access
Adversaries may attempt to position themselves between two or more networked devices using an adversary-in-the-middle (AiTM) technique to support follow-on behaviors such as [Network Sniffing](https://attack.
Why these techniques?

Cleartext HTTP cookie transmission (CWE-319) directly enables network sniffing (T1040) and adversary-in-the-middle credential capture (T1557) via MITM on unauthenticated sessions.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2025-34271Shared CWE-319
CVE-2025-64769Shared CWE-319
CVE-2026-24212Shared CWE-319
CVE-2026-5115Shared CWE-319
CVE-2020-36914Shared CWE-319
CVE-2026-24060Shared CWE-319
CVE-2026-31923Shared CWE-319
CVE-2025-67159Shared CWE-319
CVE-2025-13718Shared CWE-319
CVE-2026-30796Shared CWE-319

Affected Assets

Cxsecurity
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Mandates confidentiality and integrity protections for transmitted information using encryption, directly preventing MITM interception of cleartext cookies containing authentication credentials.

prevent

Requires cryptographic mechanisms to protect remote access sessions, mitigating cleartext HTTP transmission vulnerabilities exploited by remote attackers.

prevent

Protects authenticators such as credentials in cookies from unauthorized disclosure and modification during transmission.

References