Brightsign Digital Signage Diagnostic Web Server
Approved changes feed: RSS · Atom
cpe:2.3:a:brightsign,_llc:brightsign_digital_signage_diagnostic_web_server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Brightsign, Llc (2ca31e8c-a19d-56d4-90f2-a70fb0c4305d) |
|---|---|
| Product | Brightsign Digital Signage Diagnostic Web Server (c0b4e9d5-832f-574e-9983-24f25882c484) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36884 |
vulnerable | 2026-06-08 05:25:49.779297 |
BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF
BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forcing the application to make arbitrary HTTP requests to internal network hosts.
Published: 2025-12-10T20:47:43.331Z
Updated: 2025-12-11T18:53:57.677Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.