CVE-2017-8861
CriticalSummary
Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets.
Risk Assessment
An attacker could take control of the device, leading to potential breaches of network and data security. Changing critical settings may result in loss of access to the device or improper functioning.
Recommendation
It is recommended to secure the configuration port by implementing authentication mechanisms and restricting access to this port only for trusted IP addresses.
Other vulnerabilities in Cohu 3960HD
See all- CVE-2017-8863High
CVE-2017-8863 allows information disclosure of .esp source code on the Cohu 3960, enabling an attacker to view sensitive information such as application logic using a simple web browser.
- CVE-2017-8862Critical
The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with 'root' privileges.
Original NVD description (English source)
Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets.