Brightsign 4k242 Firmware
3 CVEs affecting Brightsign 4k242 Firmware. Latest disclosed: 2017-12-18. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17739 | Critical | 9.8 | 2017-12-18 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to r… |
CVE-2017-17738 | High | 7.5 | 2017-12-18 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html. |
CVE-2017-17737 | Medium | 6.1 | 2017-12-18 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html. |