Directory traversal

The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files...

PT-2017-14979

Name of the Vulnerable Software and Affected Versions BrightSign Digital Signage 4k242 versions 6.2.63 and below Description The issue allows directory traversal via the "/storage.html" API endpoint, specifically through the rp parameter. This enables an attacker to read or write to files...