# iDS6 DSSPro digital signage system has a CAPTCHA bypass that defeats authentication

- Date: 2026-05-16
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2020-37228

NVD published an authentication bypass flaw in iDS6 DSSPro Digital Signage System. In version 6.2, a CAPTCHA security bypass lets attackers get past authentication by requesting the autoLoginVerifyCode object.

## Sources

- [CVE-2020-37228](https://nvd.nist.gov/vuln/detail/CVE-2020-37228) (NIST NVD)
- [http://www.yerootech.com](http://www.yerootech.com)
- [https://www.exploit-db.com/exploits/48991](https://www.exploit-db.com/exploits/48991)

Page: https://signagelist.org/incidents/2026-05-ids6-dsspro-digital-signage-system-has-a/