CVE-2020-37228: iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass

Security readout for executives and security teams

This flaw lets an unauthenticated attacker obtain valid CAPTCHA values from iDS6 DSSPro 6.2, weakening a key login defense. The practical risk is account brute forcing against digital signage administration. The source bundle shows a public exploit reference, but no KEV listing or cited confirmation of active exploitation. Exposure appears limited to organizations running Yerootech iDS6 DSSPro Digital Signage System 6.2, especially where the login interface is internet-accessible. The business impact is highest for environments where signage systems are operationally important, publicly visible, or connected to broader internal systems. Prioritize this as critical for any exposed DSSPro 6.2 deployment. The issue targets login protection and has public exploit material, so remediation or isolation should be handled quickly. If the product is not deployed, record that finding and no further urgent action is needed. Mitigation focus: Identify any deployed iDS6 DSSPro Digital Signage System 6.2 instances.; Check Yerootech or maintainer guidance for patches, upgrades, or supported mitigations.; Restrict access to the DSSPro login interface to trusted networks only..

Prepared

May 18, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.