BrightSign Players Privilege Escalation Vulnerability

A vulnerability allowing execution with unnecessary privileges has been identified in BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 and series 5 prior to v9.0.166. This vulnerability could lead to privilege escalation on the device after code execution has been achieved.

Impact

Exploitation of this vulnerability could allow for privilege escalation on the device, execution of arbitrary code on the underlying operating system, or exploitation of easily guessed passwords.

Remediation

Users can update to BrightSign OS version 8.5.53.1 for series 4 players or version 9.0.166 for series 5 players. Both versions are available on the BrightSign download site.