PT-2025-19997 · Brightsign · Brightsign Os Series 5+1

Adam Merrill · Published 2025-05-06 · Updated 2025-05-08 · CVE-2025-3925

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BrightSign OS series 4 versions prior to 8.5.53.1 BrightSign OS series 5 versions prior to 9.0.166

Description The issue allows for privilege escalation on the device once code execution has been obtained, due to execution with unnecessary privileges.

Recommendations For BrightSign OS series 4 versions prior to 8.5.53.1, update to version 8.5.53.1 or later. For BrightSign OS series 5 versions prior to 9.0.166, update to version 9.0.166 or later.

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-3925

Affected Products

Brightsign Os Series 4

Brightsign Os Series 5

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-3925 · Security Note
• https://brightsign.biz/resources/software-downloads · Note
• https://t.me/cvetracker/23298 · Telegram Post
• https://twitter.com/CVEnew/status/1920246389440655415 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-126-03 · Note
• https://twitter.com/cybercronai/status/1920579602172277036 · Twitter Post
• https://t.me/cvedetector/24781 · Telegram Post
• https://twitter.com/syedaquib77/status/1920113363285098984 · Twitter Post
• https://twitter.com/syedaquib77/status/1919863119930675698 · Twitter Post