CVE-2017-8860

2017-11-2208:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a specially crafted web request with an extra / character, such as a “GET // HTTP/1.1” request.

References

bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/