GCVE - cpe:2.3:h:cohuhd:3960hd:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cohuhd:3960hd:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Cohuhd (`286156c1-4321-54e6-9f9f-21d0933d7c35`)
Product	3960Hd (`b26ba700-7556-595a-a5ea-9f2543e0b66a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-8864`	not_vulnerable	2026-06-08 05:10:09.013335	Details available Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test. Published: 2017-11-22T08:00:00.000Z Updated: 2024-08-05T16:48:22.879Z Open on db.gcve.eu Reference links https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8863`	not_vulnerable	2026-06-08 05:10:09.012929	Details available Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with a simple web browser. Published: 2017-11-22T08:00:00.000Z Updated: 2024-08-05T16:48:22.892Z Open on db.gcve.eu Reference links https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8862`	not_vulnerable	2026-06-08 05:10:09.012520	Details available The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with "root" privileges. Published: 2017-11-22T08:00:00.000Z Updated: 2024-08-05T16:48:22.863Z Open on db.gcve.eu Reference links https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8861`	not_vulnerable	2026-06-08 05:10:09.012188	Details available Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets. Published: 2017-11-22T08:00:00.000Z Updated: 2024-08-05T16:48:22.838Z Open on db.gcve.eu Reference links https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8860`	not_vulnerable	2026-06-08 05:10:09.011757	Details available Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a specially crafted web request with an extra / character, such as a "GET // HTTP/1.1" request. Published: 2017-11-22T08:00:00.000Z Updated: 2024-08-05T16:48:22.839Z Open on db.gcve.eu Reference links https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.