CVE-2017-8861
CriticalSummary
Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets.
Risk Assessment
An attacker could take control of the device, leading to potential breaches of network and data security. Changing critical settings may result in loss of access to the device or improper functioning.
Recommendation
It is recommended to secure the configuration port by implementing authentication mechanisms and restricting access to this port only for trusted IP addresses.
Original NVD description (English source)
Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets.