Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: BrightSign Clear all filters
TI-2025-34518 CVE-2025-54756 · GHSA-j8xr-3xqm-72rh

BrightSign Players Use of Default Credentials

Priority LOW 38

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00147 Published 2026-02-12 Fixed in v8.5.53.1, v9.0.166 CWE-1392
TI-2020-19019 CVE-2020-36884 · GHSA-86rv-3v3v-xmw6

BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF

Priority HIGH 70

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01119 Published 2025-12-10 No fix listed CWE-918
TI-2025-03471 CVE-2025-3925 · GHSA-3pqj-q5j3-4r5q

BrightSign Players Execution with Unnecessary Privileges

Priority LOW 38

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00194 Published 2025-05-07 Fixed in v8.5.53.1, v9.0.166 CWE-250