Read the docs

ACTi Corporation

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ACTi Corporation records in CISA KEV

No ACTi Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Camera Firmware 3 records MEDIUM Network Video Recorder 2 records MEDIUM Nvr 1 record MEDIUM

Records

3 records in Camera Firmware · all components

TI-2017-02391 CVE-2017-3186 · GHSA-5vm6-jhvv-9rhg

Hard-coded credentials in ACTi D, B, I, and E series cameras

Priority MEDIUM 51

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06085 Published 2017-12-15 No fix listed CWE-521
TI-2017-02389 CVE-2017-3184 · GHSA-6qmf-mgwv-p87x

Missing authentication in ACTi D, B, I, and E series cameras

Priority MEDIUM 51

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05922 Published 2017-12-15 No fix listed CWE-306
TI-2017-02390 CVE-2017-3185 · GHSA-hgpq-gf6r-4vr6

Information disclosure in ACTi D, B, I, and E series cameras

Priority MEDIUM 48

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03217 Published 2017-12-15 No fix listed CWE-598
Open these records in search →