CVE-2014-8384 The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the d...
HighCVSS 9.4
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infocus in3128hd firmware | = 0.26 | No fix listed |
References
- packetstormsecurity.com exploit
- 20150427 [CORE-2015-0008] - InFocus IN3128HD Projector Multiple Vulnerabilities exploit mailing-list
- www.coresecurity.com exploit vendor-advisory