CVEvulnerability

CVE-2014-8384

9.4 HIGH Published 2015-05-18 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-05-18
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.4 HIGH — AV:N/AC:L/Au:N/C:N/I:C/A:C

Description

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request.

Affected configurations

• infocus in3128hd firmware 0.26

References

http://packetstormsecurity.com/files/131661/InFocus-IN3128HD-Projector-Missing-Authentication.html Exploit
http://seclists.org/fulldisclosure/2015/Apr/88 Exploit
http://www.coresecurity.com/advisories/infocus-in3128hd-projector-multiple-vulnerabilities Exploit, Vendor Advisory
http://packetstormsecurity.com/files/131661/InFocus-IN3128HD-Projector-Missing-Authentication.html Exploit
http://seclists.org/fulldisclosure/2015/Apr/88 Exploit
http://www.coresecurity.com/advisories/infocus-in3128hd-projector-multiple-vulnerabilities Exploit, Vendor Advisory