Description
BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or
series 5 prior to v9.0.166 contain an execution with unnecessary
privileges vulnerability, allowing for privilege escalation on the
device once code execution has been obtained.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BrightSign | BrightSign OS series 4 players | < v8.5.53.1 | v8.5.53.1 |
| BrightSign | BrightSign OS series 5 players | < v9.0.166 | v9.0.166 |
Advisories 1
- ICSA-25-126-03 BrightSign Players (Update A) CISA ICS & IT advisories · Jan 29, 2026