Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code log files and other sensitive device information via a specially crafted web request with an extra / character such as a \GET // HTTP/1.1\ request.