CVE-2017-8864

CRITICAL

Cohu 3960HD - Code Injection

Title source: llm

Description

Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test.

References (1)

Scores

CVSS v3 9.8
EPSS 0.0065
EPSS Percentile 70.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-693
Status draft

Affected Products (1)

cohuhd/3960hd_firmware

Timeline

Published Nov 22, 2017
Tracked Since Feb 18, 2026