Skip to content

CVE-2017-3185 ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such....

CriticalCVSS 9.8 EPSS 3.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.

Affected products

ProductAffected versionsFixed in
acti camera firmware = a1d-500-v6.11.31-ac No fix listed
ACTi D, B, I, and E series cameras = A1D-500-V6.11.31-AC No fix listed

References

  • 96720 third-party-advisory vdb-entry
  • twitter.com press-media-coverage third-party-advisory
  • twitter.com press-media-coverage third-party-advisory
  • VU#355151 third-party-advisory us-government-resource