Skip to content
Noroxi

BrightSign records

3 published records for vendor brightsign.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

3 records
  • CVE-2017-17739
    43Plan

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowi

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    brightsign · 4k242 firmwareDec 18, 2017

  • CVE-2017-17738
    32Monitor

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.

    HighCVSS 7.5Proof of conceptEPSS 5%

    brightsign · 4k242 firmwareDec 18, 2017

  • CVE-2017-17737
    25Monitor

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /sto

    MediumCVSS 6.1Proof of conceptEPSS 2%

    brightsign · 4k242 firmwareDec 18, 2017