high8.1
CVE-2026-31928
The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initi…
Impact
The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Daktronics | Dmp-5000 Firmware | before 8.117.0.0 from 9.0.0.0 before 9.43.0.0 from 10.0.0.0 before 10.34.0.0 |
| Daktronics | Dmp-8000 Firmware | before 8.117.0.0 from 9.0.0.0 before 9.43.0.0 from 10.0.0.0 before 10.34.0.0 |
| Daktronics | Vfc-Dmp-5000 Firmware | before 8.117.0.0 from 9.0.0.0 before 9.43.0.0 from 10.0.0.0 before 10.34.0.0 |