CVE-2014-8384

2015-05-1815:59:01

mitre

web.nvd.nist.gov

infocus

in3128hd

projector

firmware

vulnerability

remote access

dhcp

ip configuration

security issue

CVSS2

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.01

Percentile

83.7%

JSON

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request.

Affected configurations

Nvd

Node

infocusin3128hd_firmwareMatch0.26

AND

infocusin3128hdMatch-

VendorProductVersionCPE
infocusin3128hd_firmware0.26cpe:2.3:o:infocus:in3128hd_firmware:0.26:*:*:*:*:*:*:*
infocusin3128hd-cpe:2.3:h:infocus:in3128hd:-:*:*:*:*:*:*:*