CVE-2017-17737 The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
MediumCVSS 6.1
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brightsign 4k242 firmware | <= 6.2.63 | No fix listed |
References
- www.information-paradox.net issue-tracking third-party-advisory
- 43364 exploit issue-tracking third-party-advisory vdb-entry