CVE-2017-17739

The CVE-2017-17739 entry concerns BrightSign Digital Signage (4k242) devices with firmware 6.2.63 and earlier. A directory traversal flaw exists in the /storage.html page via the rp parameter, enabling an unauthenticated attacker to read or write files on the device. Connected sources (CNVD-2018-...