CVE Catalog
CVE-2017-8864
CriticalSummary
Client-side enforcement using JavaScript on the Cohu 3960HD camera allows an attacker to manipulate options sent to the camera, potentially leading to malfunction or code execution.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the camera, posing a significant security risk to the monitoring system.
Recommendation
It is recommended to implement additional server-side security measures and avoid relying on client-side validation.
Original NVD description (English source)
Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test.