CVE-2026-31928: Daktronics Controller Firmware Use of Hard-coded Credentials

Synopsis

A hard-coded credentials vulnerability affects the Daktronics DMP-5000, VFC-DMP-5000, and DMP-8000 controller firmware. The devices ship with a default administrative web account that requires no credential change during setup, making the credentials predictable to any attacker who can reach the device over the network using only a low-privilege account. Successful exploitation gives an attacker full system control, with high impact on the confidentiality and integrity of both the device itself and connected downstream systems. Patched-image rebuilds at versions v10.34.x.x, v8.117.x.x, and v9.43.x.x are available on HarborGuard for environments running affected firmware versions.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The administrative web interface must be reachable over the network; an attacker exploits this remotely without requiring physical or local access to the device.

• AuthenticationRequired

  A low-privilege account is sufficient because the hard-coded default administrative credentials constitute the authentication barrier, and any attacker who knows the published defaults meets this condition trivially.

• Victim interactionNot required

  No user or administrator action is needed to trigger exploitation; the attacker interacts directly with the web interface.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special timing, race conditions, or environmental configuration beyond network access.

Blast Radius

• An attacker reads all configuration data, stored credentials, and system state on the affected device.
• An attacker modifies device configuration, display schedules, or firmware settings, altering physical output controlled by the device.
• Compromise extends to systems connected downstream (SC:H, SI:H): an attacker pivots through the controller to affect other networked infrastructure or control systems in the same segment.
• Full administrative access means an attacker can install modified firmware, establishing persistent control that survives reboots.