Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: ACTi Corporation Clear all filters
TI-2017-02391 CVE-2017-3186 · GHSA-5vm6-jhvv-9rhg

Hard-coded credentials in ACTi D, B, I, and E series cameras

Priority MEDIUM 51

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06085 Published 2017-12-15 No fix listed CWE-521
TI-2017-02390 CVE-2017-3185 · GHSA-hgpq-gf6r-4vr6

Information disclosure in ACTi D, B, I, and E series cameras

Priority MEDIUM 48

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03217 Published 2017-12-15 No fix listed CWE-598
TI-2017-02389 CVE-2017-3184 · GHSA-6qmf-mgwv-p87x

Missing authentication in ACTi D, B, I, and E series cameras

Priority MEDIUM 51

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05922 Published 2017-12-15 No fix listed CWE-306
TI-2007-04435 CVE-2007-4583 · GHSA-7pr3-jqjp-q488

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX…

Priority LOW 34

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote attackers to (1) create or overwrite arbitra…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08045 Published 2007-08-29 No fix listed CWE-22
TI-2007-04434 CVE-2007-4582 · GHSA-fp55-fqvp-f88q

Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in…

Priority MEDIUM 45

Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allows remote attackers to execute arbitrary code via a long second…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09965 Published 2007-08-29 No fix listed CWE-119