Filtered by vendor Brightsign Subscriptions
Filtered by product 4k242 Firmware Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-17738 1 Brightsign 2 4k242, 4k242 Firmware 2019-10-03 N/A
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.
CVE-2017-17737 1 Brightsign 2 4k242, 4k242 Firmware 2018-01-04 N/A
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
CVE-2017-17739 1 Brightsign 2 4k242, 4k242 Firmware 2018-01-04 N/A
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.