Description
Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Daktronics | VFC-DMP-5000 | < v8.117.x.x, < v9.43.x.x, < v10.34.x.x | v8.117.x.x |
| Daktronics | DMP-5000 | < v10.34.x.x, < v8.117.x.x, < v9.43.x.x | v10.34.x.x |
| Daktronics | DMP-8000 | < v10.34.x.x, < v8.117.x.x, < v9.43.x.x | v10.34.x.x |
Advisories 1
- ICSA-26-176-04 Daktronics Controller Firmware CISA ICS & IT advisories · Jun 25, 2026