Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2014-8384

🗓️ 18 May 2015 15:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 68 Views🌐 WEB

The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to modify device settings

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt		InFocus IN3128HD Projector Missing Authentication Vulnerability
28 Apr 201500:00
–zdt
attackerkb
attackerkb		CVE-2014-8384
18 May 201515:59
–attackerkb
cnvd
CNVD		Vulnerability in InFocus IN3128HD projector
19 May 201500:00
–cnvd
coresecurity
Core Security		InFocus IN3128HD Projector Multiple Vulnerabilities
27 Apr 201500:00
–coresecurity
cvelist
Cvelist		CVE-2014-8384
18 May 201515:00
–cvelist
euvd
EUVD		EUVD-2014-8221
7 Oct 202500:30
–euvd
nvd
NVD		CVE-2014-8384
18 May 201515:59
–nvd
packetstorm
Packet Storm		InFocus IN3128HD Projector Missing Authentication
28 Apr 201500:00
–packetstorm
prion
Prion		Cross site request forgery (csrf)
18 May 201515:59
–prion
ptsecurity
Positive Technologies		PT-2015-4035
18 May 201500:00
–ptsecurity
Rows per page
NVD
Node
AND
infocusin3128hd_firmwareMatch0.26
infocusin3128hdMatch-
ParameterPositionPathDescriptionCWE
tquery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:525294,s:00011&t:26,c:5,p:525295,s:0009<START-IP>&t:26,c:5,p:525296,s:0011<END-IP>&t:26,c:5,p:525297,s:0013<SUBNET-MASK-IP>&t:26,c:5,p:525298,s:0011<DEFAULT-GATEWAY-IP>&t:26,c:5,p:525299,s:0012<DNS-SERVER-IP>Missing authentication for CGI file webctrl.cgi.elf, allowing remote modification of DHCP server configuration.CWE-288, CWE-306
cquery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:525294,s:00011&t:26,c:5,p:525295,s:0009<START-IP>&t:26,c:5,p:525296,s:0011<END-IP>&t:26,c:5,p:525297,s:0013<SUBNET-MASK-IP>&t:26,c:5,p:525298,s:0011<DEFAULT-GATEWAY-IP>&t:26,c:5,p:525299,s:0012<DNS-SERVER-IP>Missing authentication for CGI file webctrl.cgi.elf, allowing remote modification of DHCP server configuration.CWE-288, CWE-306
pquery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:525294,s:00011&t:26,c:5,p:525295,s:0009<START-IP>&t:26,c:5,p:525296,s:0011<END-IP>&t:26,c:5,p:525297,s:0013<SUBNET-MASK-IP>&t:26,c:5,p:525298,s:0011<DEFAULT-GATEWAY-IP>&t:26,c:5,p:525299,s:0012<DNS-SERVER-IP>Missing authentication for CGI file webctrl.cgi.elf, allowing remote modification of DHCP server configuration.CWE-288, CWE-306
squery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:525294,s:00011&t:26,c:5,p:525295,s:0009<START-IP>&t:26,c:5,p:525296,s:0011<END-IP>&t:26,c:5,p:525297,s:0013<SUBNET-MASK-IP>&t:26,c:5,p:525298,s:0011<DEFAULT-GATEWAY-IP>&t:26,c:5,p:525299,s:0012<DNS-SERVER-IP>Missing authentication for CGI file webctrl.cgi.elf, allowing remote modification of DHCP server configuration.CWE-288, CWE-306
tquery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:525288,s:0006static&t:26,c:5,p:525289,s:0007<IP-ADDRESS>&t:26,c:5,p:525290,s:0013<SUBNET-MASK-IP>&t:26,c:5,p:525291,s:0007<DEFAULT-GATEWAY-IP>&t:26,c:5,p:525292,s:0007<DNS-SERVER-IP>Missing authentication for CGI file webctrl.cgi.elf, enabling modification of device IP configuration (including DNS).CWE-288, CWE-306
cquery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:525288,s:0006static&t:26,c:5,p:525289,s:0007<IP-ADDRESS>&t:26,c:5,p:525290,s:0013<SUBNET-MASK-IP>&t:26,c:5,p:525291,s:0007<DEFAULT-GATEWAY-IP>&t:26,c:5,p:525292,s:0007<DNS-SERVER-IP>Missing authentication for CGI file webctrl.cgi.elf, enabling modification of device IP configuration (including DNS).CWE-288, CWE-306
pquery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:525288,s:0006static&t:26,c:5,p:525289,s:0007<IP-ADDRESS>&t:26,c:5,p:525290,s:0013<SUBNET-MASK-IP>&t:26,c:5,p:525291,s:0007<DEFAULT-GATEWAY-IP>&t:26,c:5,p:525292,s:0007<DNS-SERVER-IP>Missing authentication for CGI file webctrl.cgi.elf, enabling modification of device IP configuration (including DNS).CWE-288, CWE-306
squery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:525288,s:0006static&t:26,c:5,p:525289,s:0007<IP-ADDRESS>&t:26,c:5,p:525290,s:0013<SUBNET-MASK-IP>&t:26,c:5,p:525291,s:0007<DEFAULT-GATEWAY-IP>&t:26,c:5,p:525292,s:0007<DNS-SERVER-IP>Missing authentication for CGI file webctrl.cgi.elf, enabling modification of device IP configuration (including DNS).CWE-288, CWE-306
tquery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:720896Missing authentication for CGI file webctrl.cgi.elf, enabling remote reboot of the device.CWE-288, CWE-306
cquery param/cgi-bin/webctrl.cgi.elf?&t:26,c:5,p:720896Missing authentication for CGI file webctrl.cgi.elf, enabling remote reboot of the device.CWE-288, CWE-306
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 00:16Current
6.8Medium risk
Vulners AI Score6.8
CVSS 29.4
EPSS0.03212
infocusin3128hdprojectorfirmwarevulnerabilityremote accessdhcpip configurationsecurity issue
68