Eight digital signage products tested by HKCERT have 20 vulnerabilities

Eight digital signage products tested in October 2024 had 20 vulnerabilities, 11 in web management portals and 9 in the devices, with 10 rated high risk, according to Hong Kong's computer emergency response team. Findings included insecure HTTP, weak encryption, unnecessary open network services, and touch gestures that could exit media players or reach settings. In a live demonstration, control of a display was gained in as little as three seconds. The products are not named in the sources found.

Type

Research

Sector

Government

Country

Hong Kong