Threat Investigation
Request a demo

CVE-2014-8384

Critical

Description

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request.

SeverityCritical
CVSS9.4
Exploit probability—
ProductInfocus In3128hd Firmware
PublishedMay 18, 2015
First seenMay 18, 2015

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
infocus in3128hd_firmware0.26—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.