← Back

4k242 Firmware

4k242_firmware

Vendor: Brightsign • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-17739
1Brightsign
14k242 Firmware
May 13, 2026
Dec 18, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.
CVE-2017-17738
1Brightsign
14k242 Firmware
May 13, 2026
Dec 18, 2017
N/A· v4
7.5 HIGH· v3
6.4 MEDIUM· v2
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.
CVE-2017-17737
1Brightsign
14k242 Firmware
May 13, 2026
Dec 18, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.