Skip to content
OpenAdvisories

Vendor

BrightSign

3 known vulnerabilities.

Products

BrightSign OS series 4 players 2 BrightSign OS series 5 players 2 BrightSign Digital Signage Diagnostic Web Server 1 OS series 4 players 0 OS series 5 players 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2025-54756

    BrightSign Players Use of Default Credentials

    BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information. The latest release fixes this issue for new installations; users of old insta…

    BrightSign BrightSign OS series 5 players BrightSign OS series 4 players
  • High 7.8
    CVE-2025-3925

    BrightSign Players Execution with Unnecessary Privileges

    BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained.

    BrightSign BrightSign OS series 4 players BrightSign OS series 5 players