medium6.1Public exploit code
CVE-2017-17737
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BrightSign Digital Signage - Multiple Vulnerablities2017-12-19 · webapps · hardware
Impact
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Brightsign | 4k242 Firmware | through 6.2.63 |