CVE-2019-16004 - CVE House
Back to Database
Status published Medium CVE-2019-16004

Cisco Vision Dynamic Signage Director Authentication Bypass Vulnerability

Vulnerability Description

A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to missing authentication on some of the API calls. An attacker could exploit this vulnerability by sending a request to one of the affected calls. A successful exploit could allow the attacker to interact with some parts of the API.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16004

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Cisco Vision Dynamic Signage Director
Vulnerable Versions:
Unknown

Timeline

Official Publish: September 23rd, 2020
Last Modified: November 13th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)