CVE-2014-8384

High

Published: 18/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, allowing remote attackers to modify the DHCP server and device IP configuration, reboot the device, and change the device name.

Risk Assessment

Attackers can remotely take control of the device, leading to serious security threats to the organization's network.

Recommendation

It is recommended to update the projector's firmware to the latest version and restrict access to cgi-bin/webctrl.cgi.elf.

Other vulnerabilities in InFocus IN3128HD projector

CVE-2014-8383High
The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass authentication via a direct request to main.html.

Original NVD description (English source)

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request.