[CVE-2026-28701] Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated rem…

Descripción técnica

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

Puntuación CVSS

Score: 9.8/10 — Severidad: CRITICAL — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Dmp-5000 firmware, Dmp-5000, Dmp-8000 firmware, Dmp-8000, Vfc-dmp-5000 firmware — Daktronics

Debilidades (CWE)

CWE-22

Fuente oficial

Publicado en NIST NVD.