Brightsign

5 CVEs across 4 Brightsign products. Browse Brightsign vulnerabilities, severities, and proof-of-concept exploits.

Brightsign products with known CVEs

ProductCVEs
4k2423
4k242 Firmware3
Brightsign OS Series 4 Players2
Brightsign OS Series 5 Players2
Brightsign CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-54756High8.42026-02-12BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of…
CVE-2025-3925High7.82025-05-07BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerabi…
CVE-2017-17739Critical9.82017-12-18The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to r…
CVE-2017-17738High7.52017-12-18The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.
CVE-2017-17737Medium6.12017-12-18The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.