https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-17739.htmlhttps://patchthecve.com/cve/CVE-2017-17739.htmlWed, 17 Jun 2026 01:11:34 +0000CRITICAL 9.8: The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.https://patchthecve.com/cve/CVE-2017-17738.htmlhttps://patchthecve.com/cve/CVE-2017-17738.htmlWed, 17 Jun 2026 01:11:34 +0000HIGH 7.5: The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.https://patchthecve.com/cve/CVE-2017-17737.htmlhttps://patchthecve.com/cve/CVE-2017-17737.htmlWed, 17 Jun 2026 01:11:33 +0000MEDIUM 6.1: The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.