VULNERABILITY INTELLIGENCE
CVE-2014-8384
CVSS score9.4 HIGH
EPSS probability3.21%
CISA KEVNot currently listed
Published2015-05-18
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:C/A:C
Description
The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request.
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org — Exploit
- cve@mitre.org — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory