CVE-2017-8861

Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-11-22

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• 3960hd Firmware (Cohuhd)

References

• https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/