CVE-2017-17737: Brightsign 4k242 Firmware

Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days.

The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.

Affected products

• Brightsign 4k242 Firmware: up to and including 6.2.63

Published 2017-12-18. Last modified 2026-06-17.