5 matches found
CVE-2025-0637: Improper Authentication
It has been found that the Beta10 software does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to access private areas and/or areas intended for other roles. The vulnerability has been...
CVE-2017-17738
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below allows renaming and modifying files via /tools.html...
CVE-2017-17738
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below allows renaming and modifying files via /tools.html...
PT-2017-14978
Name of the Vulnerable Software and Affected Versions BrightSign Digital Signage 4k242 versions 6.2.63 and below Description The issue allows renaming and modifying files via the "/tools.html" API endpoint. Recommendations For versions 6.2.63 and below, consider restricting access to the...