Cisco Vision Dynamic Signage Director vulnerabilities

9 CVEs affecting Cisco Vision Dynamic Signage Director, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34742, published 2021-10-06.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-1917, published 2019-07-17. Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days. A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is…
• CVE-2020-3490, published 2020-08-26. Medium severity, CVSS 4.9. EPSS: 3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct directory…
• CVE-2020-3484, published 2020-08-26. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected…
• CVE-2019-16004, published 2020-09-23. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is…
• CVE-2020-3450, published 2020-07-16. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection…
• CVE-2020-3598, published 2020-10-08. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confidential information or make configuration…
• CVE-2021-34742, published 2021-10-06. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
• CVE-2020-3485, published 2020-08-26. Medium severity, CVSS 6.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the role-based access control (RBAC) functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access…
• CVE-2020-3491, published 2020-08-26. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site…