High severity7.8NVD Advisory· Published May 7, 2025· Updated Apr 15, 2026

CVE-2025-3925

Description

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.brightsign.biz/resources/software-downloads/nvd
www.cisa.gov/news-events/ics-advisories/icsa-25-126-03nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000