Description
The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with "root" privileges.
Unscored
CVE-2017-8862
EUVD-2017-17804GHSA-r534-2r4v-gfqv
The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a speciall…
Published Nov 22, 2017 · Updated Aug 5, 2024 · Assigned by mitre