CVE-2017-8863
HighSummary
CVE-2017-8863 allows information disclosure of .esp source code on the Cohu 3960, enabling an attacker to view sensitive information such as application logic using a simple web browser.
Risk Assessment
Disclosure of sensitive information may lead to further attacks on the system, including data theft or application manipulation.
Recommendation
It is recommended to restrict access to the device's web interface and regularly update the software to patch this vulnerability.
Other vulnerabilities in Cohu 3960
See all- CVE-2017-8862Critical
The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with 'root' privileges.
- CVE-2017-8861Critical
Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets.
Original NVD description (English source)
Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with a simple web browser.