Vulnerabilities > CVE-2014-8383 - Authentication Bypass vulnerability in Infocus In3128Hd Firmware 0.26

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
infocus
critical
NVD
Published: 2015-05-18
Updated: 2015-05-19

Summary

The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass authentication via a direct request to main.html. <a href="http://cwe.mitre.org/data/definitions/306.html">Missing Authentication for Critical Function</a>

Vulnerable Configurations

Part Description Count
OS
Infocus
1
Hardware
Infocus
1

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/131661/CORE-2015-0008.txt
idPACKETSTORM:131661
last seen2016-12-05
published2015-04-28
reporterCore Security Technologies
sourcehttps://packetstormsecurity.com/files/131661/InFocus-IN3128HD-Projector-Missing-Authentication.html
titleInFocus IN3128HD Projector Missing Authentication

References