ACTi Camera Firmware A1D-500-V6.11.31-AC
Approved changes feed: RSS · Atom
cpe:2.3:o:acti:camera_firmware:a1d-500-v6.11.31-ac:*:*:*:*:*:*:*
part: o version: a1d-500-v6.11.31-ac update: *
| Vendor | Acti (403775d5-63cd-5463-9414-d2a612b61fe2) |
|---|---|
| Product | Camera Firmware (66ae4515-3073-5c40-acca-034779045817) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-3186 |
vulnerable | 2026-06-03 14:37:14.581877 |
Details available
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials.
Published: 2017-12-15T14:00:00.000Z
Updated: 2024-08-05T14:16:28.334Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3185 |
vulnerable | 2026-06-03 14:37:14.581510 |
Details available
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.
Published: 2017-12-15T14:00:00.000Z
Updated: 2024-08-05T14:16:28.235Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3184 |
vulnerable | 2026-06-03 14:37:14.581028 |
Details available
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the http://x.x.x.x/setup/setup_maintain_firmware-default.html page. This will allow an attacker to perform a factory reset on the device, leading to a denial of service condition or the ability to make use of default credentials (CVE-2017-3186).
Published: 2017-12-15T14:00:00.000Z
Updated: 2024-08-05T14:16:28.231Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.