# Cisco Vision Dynamic Signage Director flaw allows SQL injection

- Date: 2020-07-16
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2020-3450

NVD published a SQL injection vulnerability in Cisco Vision Dynamic Signage Director. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system.

## Sources

- [CVE-2020-3450](https://nvd.nist.gov/vuln/detail/CVE-2020-3450) (NIST NVD)
- [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-visio-dir-sql-inj-fPm3MPfT](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-visio-dir-sql-inj-fPm3MPfT)

Page: https://signagelist.org/incidents/2020-07-cisco-vision-dynamic-signage-director-flaw-allows/