https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-8864.htmlhttps://patchthecve.com/cve/CVE-2017-8864.htmlWed, 17 Jun 2026 01:27:06 +0000CRITICAL 9.8: Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test.https://patchthecve.com/cve/CVE-2017-8863.htmlhttps://patchthecve.com/cve/CVE-2017-8863.htmlWed, 17 Jun 2026 01:27:06 +0000HIGH 7.5: Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with a simple web browser.https://patchthecve.com/cve/CVE-2017-8862.htmlhttps://patchthecve.com/cve/CVE-2017-8862.htmlWed, 17 Jun 2026 01:27:06 +0000CRITICAL 9.8: The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with "root" privileges.https://patchthecve.com/cve/CVE-2017-8861.htmlhttps://patchthecve.com/cve/CVE-2017-8861.htmlWed, 17 Jun 2026 01:27:05 +0000CRITICAL 9.8: Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets.https://patchthecve.com/cve/CVE-2017-8860.htmlhttps://patchthecve.com/cve/CVE-2017-8860.htmlWed, 17 Jun 2026 01:27:05 +0000MEDIUM 6.5: Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a specially crafted web request with an extra / character, such as a "GET // HTTP/1.1" request.