Security Advisory

CVE-2017-8862

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-22 08:00:00

Last updated 2024-08-05 16:48:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with "root" privileges.

← Browse all CVEs View on cve.org ↗