CVE-2020-36917
Published: 06 January 2026
Summary
CVE-2020-36917 is a high-severity Cleartext Transmission of Sensitive Information (CWE-319) vulnerability in Cxsecurity (inferred from references). Its CVSS base score is 8.6 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Network Sniffing (T1040); ranked at the 19.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-17 (Remote Access) and IA-5 (Authenticator Management).
Deeper analysis
CVE-2020-36917 is a sensitive information disclosure vulnerability in the iDS6 DSSPro Digital Signage System version 6.2. The issue stems from cleartext transmission of cookies over HTTP, allowing remote attackers to intercept authentication credentials, particularly user passwords exposed via the autoSave feature. It is classified under CWE-319 (Cleartext Transmission of Sensitive Information) with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), highlighting high confidentiality impact.
Remote attackers without privileges can exploit this vulnerability by conducting man-in-the-middle (MITM) attacks on HTTP communications. By positioning themselves between users and the server, attackers can capture cookies containing plaintext passwords during autoSave operations, enabling unauthorized access to affected accounts.
Advisories from CXSecurity, IBM X-Force Exchange, Packet Storm Security, and VulnCheck detail the vulnerability and exploitation method, with an archived vendor page at yerootech.com. No specific patches or mitigation steps are outlined in the referenced advisories.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-1024
Vulnerability details
iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Cleartext HTTP cookie transmission (CWE-319) directly enables network sniffing (T1040) and adversary-in-the-middle credential capture (T1557) via MITM on unauthenticated sessions.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Mandates confidentiality and integrity protections for transmitted information using encryption, directly preventing MITM interception of cleartext cookies containing authentication credentials.
Requires cryptographic mechanisms to protect remote access sessions, mitigating cleartext HTTP transmission vulnerabilities exploited by remote attackers.
Protects authenticators such as credentials in cookies from unauthorized disclosure and modification during transmission.