Approved changes feed: RSS · Atom

cpe:2.3:o:brightsign:4k242_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorBrightsign (9412761d-626b-5bc4-8852-2751380da8a9)
Product4K242 Firmware (9c8c0098-e288-5c71-81e0-bc4cc5f0d465)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17739 vulnerable 2026-06-08 05:09:09.810810 Details available
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.
Published: 2017-12-18T06:00:00.000Z
Updated: 2024-08-05T20:59:17.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17738 vulnerable 2026-06-08 05:09:09.810457 Details available
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.
Published: 2017-12-18T06:00:00.000Z
Updated: 2024-08-05T20:59:17.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17737 vulnerable 2026-06-08 05:09:09.809499 Details available
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
Published: 2017-12-18T06:00:00.000Z
Updated: 2024-08-05T20:59:17.679Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.