# Cisco Vision Dynamic Signage Director has 4 flaws, including privilege escalation

- Date: 2020-08-26
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2020-3484, CVE-2020-3485, CVE-2020-3490, CVE-2020-3491

NVD published 4 vulnerabilities in Cisco Vision Dynamic Signage Director, covering security flaw, privilege escalation, path traversal and cross-site scripting. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device.

## Sources

- [CVE-2020-3484](https://nvd.nist.gov/vuln/detail/CVE-2020-3484) (NIST NVD)
- [CVE-2020-3485](https://nvd.nist.gov/vuln/detail/CVE-2020-3485) (NIST NVD)
- [CVE-2020-3490](https://nvd.nist.gov/vuln/detail/CVE-2020-3490) (NIST NVD)
- [CVE-2020-3491](https://nvd.nist.gov/vuln/detail/CVE-2020-3491) (NIST NVD)
- [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vdsd-W7mnkwj7](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vdsd-W7mnkwj7)
- [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvdsd-rbac-y9LM5jw4](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvdsd-rbac-y9LM5jw4)

Page: https://signagelist.org/incidents/2020-08-cisco-vision-dynamic-signage-director-has-4/