Global
BrightSign OS flaw lets code on a player escalate privileges (CVE-2025-3925)
CISA's ICS advisory ICSA-25-126-03 covers an execution with unnecessary privileges weakness in BrightSign OS series 4 before 8.5.53.1 and series 5 before 9.0.166. CISA scored it 8.5 under CVSS v4 and described it as remotely exploitable with low attack complexity. Once code runs on a player, the flaw can be used for privilege escalation, and the fixed OS releases close it.
- Type
- Vulnerability
- Sector
- Other
- Country
- Global
