What’s Vulnerable › Vulnerabilities

CVE-2017-8860

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-22 · updated 2026-06-17
• Weakness: CWE-200

Description

Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a specially crafted web request with an extra / character, such as a "GET // HTTP/1.1" request.

Affected products

• Cohuhd 3960Hd Firmware: all versions

References

• https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
• https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/

Get alerted when CVE-2017-8860 or the next vulnerability affects your stack