CVE-2017-17739 The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.
CriticalCVSS 9.8
EPSS 11.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brightsign 4k242 firmware | <= 6.2.63 | No fix listed |
References
- www.information-paradox.net issue-tracking third-party-advisory
- 43364 exploit issue-tracking third-party-advisory vdb-entry