Skip to content
OpenAdvisories
Unscored CVE-2017-8864 EUVD-2017-17806GHSA-h4xp-v7gq-rc9v

Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent t…

Published Nov 22, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test.

References