Daktronics Controller Firmware
Multiple Daktronics controller models contain path traversal and arbitrary file upload vulnerabilities that allow unauthenticated attackers to gain complete root-level access to the devices. The vulnerabilities affect VFC-DMP-5000, DMP-5000, and DMP-8000 firmware versions prior to 8.117.0.x, 9.43.0.x, or 10.34.0.x across all product lines. Exploitation requires only network access and no user interaction or prior authentication. An attacker could completely take over the controller and modify all functionality or settings.
- Network access to the Daktronics controller device
- No credentials required for initial exploitation
Patching may require device reboot — plan for process interruption
/api/v1/advisories/527667b7-5495-45cd-9fbf-912a8eaa6be8Get OT security insights every Tuesday
Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.