CVE-2017-8864

2017-11-2208:00:00

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

JSON

Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side “if (!passwordsAreEqual())” test.

References

bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/