Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ACTi Corporation Component: Camera Firmware Clear all filters
TI-2017-02391 CVE-2017-3186 · GHSA-5vm6-jhvv-9rhg

Hard-coded credentials in ACTi D, B, I, and E series cameras

Priority MEDIUM 51

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06085 Published 2017-12-15 No fix listed CWE-521
TI-2017-02390 CVE-2017-3185 · GHSA-hgpq-gf6r-4vr6

Information disclosure in ACTi D, B, I, and E series cameras

Priority MEDIUM 48

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03217 Published 2017-12-15 No fix listed CWE-598
TI-2017-02389 CVE-2017-3184 · GHSA-6qmf-mgwv-p87x

Missing authentication in ACTi D, B, I, and E series cameras

Priority MEDIUM 51

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05922 Published 2017-12-15 No fix listed CWE-306