Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BrightSign Digital Signage（4k242）跨站脚本漏洞
Vulnerability Description
BrightSign Digital Signage（4k242）是美国BrightSign公司的一套数字标牌多媒体播放设备。 使用6.2.63及之前版本固件的BrightSign Digital Signage（4k242）存在跨站脚本漏洞，该漏洞源于程序没有验证用户输入。远程攻击者可通过向/network_diagnostics.html or /storage_info.html网页发送‘REF’参数利用该漏洞执行代码，窃取令牌。
CVSS Information
N/A
Vulnerability Type
N/A