CVE-2017-17737

Name of the Vulnerable Software and Affected Versions BrightSign Digital Signage (4k242) device versions 6.2.63 and below

Description The issue concerns a problem where an attacker can execute malicious scripts. The estimated number of potentially affected devices worldwide is not specified. Details about real-world incidents where this issue was exploited are not provided. Technical details about exploitation include the API endpoint /network diagnostics.html or /storage info.html, and the vulnerable parameter REF.

Recommendations For versions 6.2.63 and below, avoid using the REF parameter in the affected API endpoints /network diagnostics.html and /storage info.html until the issue is resolved.