InFocus IN3128HD Projector CVE-2014-8384 Authentication Bypass Vulnerability

Bugtraq ID:	74360
Class:	Design Error
CVE:	CVE-2014-8384
Remote:	Yes
Local:	No
Published:	Apr 27 2015 12:00AM
Updated:	Apr 27 2015 12:00AM
Credit:	Joaquin Rodriguez Varela from Core Security CoreLabs Team.
Vulnerable:	InFocus Corporation IN3128HD 0.26
Not Vulnerable:

InFocus IN3128HD Projector CVE-2014-8384 Authentication Bypass Vulnerability

InFocus IN3128HD Projector is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication process and gain unauthorized access to the system. Successfully exploiting this issue may lead to further attacks.

InFocus IN3128HD 0.26 is vulnerable.

InFocus IN3128HD Projector CVE-2014-8384 Authentication Bypass Vulnerability

An attacker can exploit this issue using a web browser.

InFocus IN3128HD Projector CVE-2014-8384 Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

InFocus IN3128HD Projector CVE-2014-8384 Authentication Bypass Vulnerability

References:

• InFocus IN3128HD Projector Homepage (infocus)
  
• InFocus IN3128HD Projector Multiple Vulnerabilities - See more at: http://www.co (coresecurity)