CVE-2017-8862 – The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or p …

0

Vuln ID: CVE-2017-8862

Published: 2017-11-22  08:29:00Z

Description: The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with “root” privileges.

Source: NVD.NIST.GOV