Description
BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or
series 5 prior to v9.0.166 use a default password that is guessable with
knowledge of the device information. The latest release fixes this
issue for new installations; users of old installations are encouraged
to change all default passwords.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BrightSign | BrightSign OS series 4 players | < v8.5.53.1 | v8.5.53.1 |
| BrightSign | BrightSign OS series 5 players | < v9.0.166 | v9.0.166 |
Advisories 1
- ICSA-25-126-03 BrightSign Players (Update A) CISA ICS & IT advisories · Jan 29, 2026